🇦🇺
MAGIC
2026-06-03 02:25:14
(3 days ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-30 15:47:38
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.147.235.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.147.235.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 11:47:32.210941 2026] [security2:error] [pid 14400:tid 14400] [client 45.147.235.191:20865] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||transcapitalsolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "transcapitalsolutions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afN5lCr6zWgJqI1uUT15_gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-04-27 10:04:24
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 06:11:52
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.147.235.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.147.235.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 02:11:46.631407 2026] [security2:error] [pid 21993:tid 21993] [client 45.147.235.191:43791] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||engineeringarts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "engineeringarts.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae7-Itp0uV_BCTdkFZamqgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 13:34:41
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.147.235.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.147.235.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 09:34:37.810128 2026] [security2:error] [pid 19703:tid 19703] [client 45.147.235.191:39053] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cathybermanmft.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cathybermanmft.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae4UbXLhOpqIHBLP9rmbfgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 12:34:49
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.147.235.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.147.235.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 08:34:45.186451 2026] [security2:error] [pid 7304:tid 7304] [client 45.147.235.191:34505] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||carolinafootprints.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "carolinafootprints.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae4GZR3WYHLepgA9N2q_wAAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
Cognisant-Security
2026-03-31 08:40:00
(2 months ago)
Attempts to login WP with invalid user credentials
Web App Attack
Hacking
🇦🇺
MAGIC
2026-02-04 01:11:55
(4 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2026-01-19 00:00:00
(4 months ago)
Brute force against VPN
Brute-Force
Bad Web Bot
2026-01-18 00:17:39
(4 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.18 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.18 is noted in report timestamp
show less
Hacking
Brute-Force
🇫🇷
masterguru
2025-12-23 11:00:15
(5 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.147.235.191 (US/United States/-): 1 in the ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.147.235.191 (US/United States/-): 1 in the last 3600 secs (0-193)
show less
Hacking
🇨🇦
wil.com
2025-11-28 07:22:51
(6 months ago)
GlobalProtect login attempts with user billy.
VPN IP
Brute-Force
🇺🇸
fbarela
2025-11-12 00:01:32
(6 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force