🇺🇸
TPI-Abuse
2026-06-05 21:16:11
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 45.66.209.197 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.209.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 17:16:05.093576 2026] [security2:error] [pid 15808:tid 15808] [client 45.66.209.197:61083] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rogerandcarol.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rogerandcarol.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiM8lRrQHDRD_btRKFSv0wAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-06-02 03:23:28
(4 days ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-05-31 19:44:32
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 45.66.209.197 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.209.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 15:44:25.019014 2026] [security2:error] [pid 29549:tid 29549] [client 45.66.209.197:43531] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||horizontravelgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "horizontravelgroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahyPmbsPvt0dakpJBy2jnQAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-13 00:51:17
(8 months ago)
Malicious activity detected
Hacking
Web App Attack
🇩🇪
Reinhard
2025-08-31 06:09:48
(9 months ago)
Harvesting non-existent pages or unknown malicious BOT.
Bad Web Bot
🇨🇿
lp
2025-08-30 09:25:50
(9 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.209.197
2025-08-30T09:49:04+02: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.209.197
2025-08-30T09:49:04+02:00 vpn Access-Reject 'scanner' station: 45.66.209.197 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇲🇽
licjperezl
2025-06-05 18:03:36
(1 year ago)
Ataque de diccionario o DDoS en nuestros servicios en linea
Brute-Force
🇨🇭
backslash
2025-03-07 23:50:07
(1 year ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
2025-02-25 06:15:23
(1 year ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.02.25 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.02.25 is noted in report timestamp
show less
Hacking
Brute-Force
🇨🇦
wil.com
2024-09-25 02:46:08
(1 year ago)
GlobalProtect login attempts with user rguillen.
VPN IP
Brute-Force
🇺🇸
TPI-Abuse
2024-04-18 17:27:00
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 45.66.209.197 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.66.209.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 18 13:26:53.894352 2024] [security2:error] [pid 24820] [client 45.66.209.197:17821] [client 45.66.209.197] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||portalvasco.com|F|2"] [data ".treehugger.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "portalvasco.com"] [uri "/blog/2014/05/ocho-pautas-contribuir-desarrollo-urbano-adaptado-nuevas-necesidades/www.treehugger.com"] [unique_id "ZiFX3UjY3VgoLKLEwR9DxgAAABE"], referer: https://portalvasco.com/blog/2014/05/ocho-pautas-contribuir-desarrollo-urbano-adaptado-nuevas-necesidades/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-14 11:43:42
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 45.66.209.197 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.66.209.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 14 07:43:39.379350 2024] [security2:error] [pid 6449] [client 45.66.209.197:31721] [client 45.66.209.197] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Lectern II/Savannah Whiskey/originals/Thumbs.db"] [unique_id "ZhvBaymeqUlM2yIj60VxMgAAAAU"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Lectern%20II/Savannah%20Whiskey/originals/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
VSM Networks
2024-02-29 08:29:08
(2 years ago)
Credential Stuffing
Brute-Force
2023-02-07 19:15:48
(3 years ago)
Malicious Activity detected
Hacking
Web App Attack
🇨🇭
backslash
2023-01-03 10:19:28
(3 years ago)
honeypot
Bad Web Bot