🇧🇷
hostseries
2025-09-11 06:14:14
(8 months ago)
Trigger: LF_DISTATTACK
Brute-Force
🇬🇧
D3monite
2025-09-05 07:22:00
(9 months ago)
Attempted Brute Force (cpaneld)
Brute-Force
🇩🇪
ps-center
2025-09-03 07:41:49
(9 months ago)
MYH-W: TCP-Scanner. Port: 22
Port Scan
2025-08-23 11:25:52
(9 months ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇨🇭
backslash
2025-07-14 00:20:14
(10 months ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇺🇸
TPI-Abuse
2025-07-13 22:28:11
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 45.201.10.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.201.10.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 18:28:06.371997 2025] [security2:error] [pid 20263:tid 20263] [client 45.201.10.6:49807] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||marcosmelero.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marcosmelero.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aHQy9gb56ntEzx668l6EEwAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-07-13 12:10:29
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇧🇪
voormedia
2025-06-27 19:12:08
(11 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
2025-04-14 00:17:08
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-03-29 03:12:57
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-11-29 10:18:00
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.201.10.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.201.10.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 29 05:17:53.526094 2024] [security2:error] [pid 1708505:tid 1708505] [client 45.201.10.6:51769] [client 45.201.10.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gotdt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gotdt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z0mU0U8t8KAiBySOzZ99NAAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-11-25 04:52:05
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-11-24 06:11:01
(1 year ago)
Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/1.1, GET /wp-json/wp/v2/users HTTP/1. ...
show more
Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/1.1, GET /wp-json/wp/v2/users HTTP/1.1, GET /?author=1 HTTP/1.1, POST /xmlrpc.php HTTP/1.1, GET /admin HTTP/1.1
show less
Hacking
Web App Attack
2024-11-19 21:54:42
(1 year ago)
apache-wordpress-login
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2024-11-18 10:45:37
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.201.10.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.201.10.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 18 05:45:33.134701 2024] [security2:error] [pid 8994:tid 8994] [client 45.201.10.6:55743] [client 45.201.10.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||millergrain.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "millergrain.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZzsazR1im7BrIOjo5drhxgAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack