🇩🇪
Hazzard
2026-03-30 04:30:42
(2 months ago)
(wordpress) Failed wordpress login from 45.140.207.243 (IL/Israel/-/-/-/[redacted]): (CF_ENABLE)
Brute-Force
🇺🇸
TPI-Abuse
2026-03-22 12:46:04
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 08:45:56.707851 2026] [security2:error] [pid 32516:tid 32516] [client 45.140.207.243:26025] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||schmitzcomm.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "schmitzcomm.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ab_khNRlGkAiM__dkpXyyQAAACw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-03-17 02:54:30
(3 months ago)
(wordpress) Failed wordpress login from 45.140.207.243 (IL/Israel/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-03-16 06:48:24
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 02:48:16.630502 2026] [security2:error] [pid 20310:tid 20436] [client 45.140.207.243:37575] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||9line-lb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "9line-lb.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abensIVUCkwCPZJBSmm3RQAAAoM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-03-12 06:29:30
(3 months ago)
1.617 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇵🇪
Smart Code Lab And Services
2026-03-11 16:24:00
(3 months ago)
Wordpress brute force attack
Brute-Force
🇩🇪
kjaerulff
2026-03-11 14:20:53
(3 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2026-03-07 12:07:27
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 07 07:07:18.878116 2026] [security2:error] [pid 17307:tid 17307] [client 45.140.207.243:47345] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arriagarealestate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arriagarealestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aawU9m77WWOTMF16_LDNrAAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 10:42:32
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 05:42:26.352888 2026] [security2:error] [pid 14608:tid 14608] [client 45.140.207.243:60461] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||blublk.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blublk.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXH_EskpQRdzxdhS5uaB3gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-03-28 13:48:26
(1 year ago)
This IP was involved in an brute force and password spray attack on 2025/03/28 08:30:37
Port Scan
Brute-Force
Exploited Host
Web App Attack
🇨🇦
wil.com
2025-03-28 08:41:06
(1 year ago)
GlobalProtect login attempts with user NATALIES.
VPN IP
Brute-Force
2024-11-28 12:56:26
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-11-27 10:45:18
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-11-26 23:58:34
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 26 18:58:25.224990 2024] [security2:error] [pid 15860:tid 15860] [client 45.140.207.243:21237] [client 45.140.207.243] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.babylontravelone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.babylontravelone.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z0ZgobFZiy3hD4ClfNMCzwAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-11-25 16:07:59
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH