🇺🇸
kosada.com
2026-05-17 07:01:43
(2 weeks ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-05-08 15:06:33
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.66.209.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.209.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 11:06:29.165187 2026] [security2:error] [pid 27163:tid 27163] [client 45.66.209.178:54057] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wizind.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wizind.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af379ZuSToGCxjh6erqYQQAAABU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 05:12:07
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 45.66.209.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.209.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 01:12:00.023692 2026] [security2:error] [pid 17185:tid 17185] [client 45.66.209.178:17439] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||soereng.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "soereng.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adCdoJrLr7rdxtBKHKDFEwAAABM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 04:05:23
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 45.66.209.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.209.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 00:05:19.528527 2026] [security2:error] [pid 32395:tid 32395] [client 45.66.209.178:23681] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||turtletaekwondo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "turtletaekwondo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adCN_6zCEFG6US7s8DA6mwAAAB4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-03-16 11:15:36
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 13:06:14
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-08-23 22:17:29
(9 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.08.23 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.08.23 is noted in report timestamp
show less
Hacking
Brute-Force
2025-07-05 08:17:12
(11 months ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇬🇧
essinghigh
2024-07-28 11:22:37
(1 year ago)
1722165756 # Service_probe # SIGNATURE_SEND # source_ip:45.66.209.178 # dst_port:3553
...
Port Scan