🇺🇸
nationaleventpros.com
2026-06-14 18:20:11
(1 week ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-06-11 00:21:26
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 20:21:21.431553 2026] [security2:error] [pid 18349:tid 18349] [client 45.148.235.189:48353] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cpking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cpking.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ain_gdhewGP7jiqY_dxzRAAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 17:20:48
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 13:20:44.482222 2026] [security2:error] [pid 7806:tid 7806] [client 45.148.235.189:17867] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dwightbrown.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dwightbrown.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah8Q7H-y8hFAz_EpryAcpwAAADA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 14:16:26
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 10:16:20.020064 2026] [security2:error] [pid 26285:tid 26285] [client 45.148.235.189:15449] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vendor21.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vendor21.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahRZtIMzUEcDz2X5SX5SnAAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-05-20 06:08:55
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-05-13 14:00:31
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 10:00:27.096840 2026] [security2:error] [pid 30585:tid 30593] [client 45.148.235.189:64675] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||driftwoodblue.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "driftwoodblue.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agSD-9wALXZxZ7CnJRSjxwAAAYU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 18:33:13
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 14:33:09.783315 2026] [security2:error] [pid 19722:tid 19722] [client 45.148.235.189:47525] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||divesfl.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "divesfl.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agNyZcO4p7wX_Kr2QiRKeAAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-02 21:21:06
(1 month ago)
PARMACOM WEBEXPLOIT 45.148.235.189 (45.148.235.189)
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 22:50:39
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 18:50:33.815376 2026] [security2:error] [pid 22323:tid 22323] [client 45.148.235.189:57829] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||beautyradio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "beautyradio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afKLOUgrugBkZQrsJN9qiAAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oralunal
2026-04-02 10:50:34
(2 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:14
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-11-02 01:18:10
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.235.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 21:18:03.758197 2025] [security2:error] [pid 25005:tid 25005] [client 45.148.235.189:23627] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iostation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iostation.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQaxS0x1ttX-agwrjw9kKwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇹
Malta
2025-10-31 05:09:21
(7 months ago)
45.148.235.189 - - [31/Oct/2025:06:09:21 +0100] "GET /wp-json/wp/v2/users/ HTTP/1.1" "Mozilla/5.0 (W ...
show more
45.148.235.189 - - [31/Oct/2025:06:09:21 +0100] "GET /wp-json/wp/v2/users/ HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36"
show less
VPN IP
Hacking
Web App Attack
2025-06-11 02:30:00
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇭
backslash
2025-06-05 19:00:04
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot