|
🇳🇱
GabrielJST
|
|
(sshd) Failed SSH login from 45.3.48.174 (US/United States/-)
|
Brute-Force
SSH
|
|
Anonymous
|
|
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.03 is noted in report timestamp
|
Hacking
Brute-Force
|
|
Anonymous
|
|
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.30 is noted in report timestamp
|
Hacking
Brute-Force
|
|
🇺🇸
hostseries
|
|
Trigger: LF_DISTATTACK
|
Brute-Force
|
|
Anonymous
|
|
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.27 is noted in report timestamp
|
Hacking
Brute-Force
|
|
🇺🇸
thelonglostone
|
|
"Repeated brute force attempts to access VPN"
|
Brute-Force
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.3.48.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 25 04:08:56.101551 2025] [security2:error] [pid 23309:tid 23309] [client 45.3.48.174:36109] [clie ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.48.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 25 04:08:56.101551 2025] [security2:error] [pid 23309:tid 23309] [client 45.3.48.174:36109] [client 45.3.48.174] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cityindustries.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cityindustries.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z-JkmCNmEelv19YlXyATEAAAAA8"], referer: https://cityindustries.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.3.48.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 06 13:48:48.597197 2025] [security2:error] [pid 889683:tid 889683] [client 45.3.48.174:13451] [cl ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.48.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 06 13:48:48.597197 2025] [security2:error] [pid 889683:tid 889683] [client 45.3.48.174:13451] [client 45.3.48.174] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||goldensynergy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "goldensynergy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z8nuEGwvnFjo7Hxcd2e__AAAAA8"], referer: https://goldensynergy.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.3.48.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 01 14:03:12.750049 2025] [security2:error] [pid 12709:tid 12709] [client 45.3.48.174:55509] [clie ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.48.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 01 14:03:12.750049 2025] [security2:error] [pid 12709:tid 12709] [client 45.3.48.174:55509] [client 45.3.48.174] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||listerman.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "listerman.org"] [uri "/wp-json/wp/v2/users"] [unique_id "Z8NZ8EaEIRwrx1_zhKNB6gAAAAQ"], referer: https://listerman.org
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇺
MAGIC
|
|
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
|
DDoS Attack
Bad Web Bot
|
|
🇩🇪
iNetWorker
|
|
trying to access non-authorized port
|
Port Scan
|
|
🇩🇪
dpsbs
|
|
multiple ips intrustions detected
|
Hacking
|
|
🇺🇸
vestibtech
|
|
45.3.48.174 - - [23/Dec/2024:08:49:44 -0700] "GET /wp-admin/plugin-install.php HTTP/1.1" 404 6938 "https://vestibtech.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show more
45.3.48.174 - - [23/Dec/2024:08:49:44 -0700] "GET /wp-admin/plugin-install.php HTTP/1.1" 404 6938 "https://vestibtech.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇺🇸
hostseries
|
|
Trigger: LF_DISTATTACK
|
Brute-Force
|
|
Anonymous
|
|
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
|
Web App Attack
|
