🇺🇸
TPI-Abuse
2026-10-21 14:48:43
(56 minutes ago)
(mod_security) mod_security (id:225170) triggered by 46.98.61.36 (36.61.PPPoE.fregat.ua): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 46.98.61.36 (36.61.PPPoE.fregat.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 10:48:37.487009 2026] [security2:error] [pid 31474:tid 31474] [client 46.98.61.36:45836] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jesussotoca.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jesussotoca.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atjQxdoM-kpP79GQpBCLnQAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-20 06:40:54
(1 day ago)
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 ...
show more
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-16 18:01:23
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 46.98.61.36 (36.61.PPPoE.fregat.ua): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 46.98.61.36 (36.61.PPPoE.fregat.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 14:01:17.830039 2026] [security2:error] [pid 19074:tid 19074] [client 46.98.61.36:39578] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||brianwhitty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brianwhitty.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atJmbQxxMcyKFlPc8qRVTAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
guldkage
2026-10-09 18:53:54
(1 week ago)
Unauthorized connection attempt detected from IP address 46.98.61.36 to port 23 (ger-03) [S]
Brute-Force
Exploited Host
🇺🇸
RAP
2026-10-09 15:18:55
(1 week ago)
2026-10-09 15:18:55 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸
TPI-Abuse
2026-10-09 06:50:30
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 46.98.61.36 (36.61.PPPoE.fregat.ua): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 46.98.61.36 (36.61.PPPoE.fregat.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 02:50:25.686156 2026] [security2:error] [pid 28377:tid 28377] [client 46.98.61.36:38866] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||buanamegah.kairoslogammakmur.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "buanamegah.kairoslogammakmur.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asiOsa0eGto71GDAfJtKMwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇳
cybsecaoccol
2026-10-06 18:09:40
(2 weeks ago)
unauthorized connection or malicious port scan attempted on tcp port - njng
Port Scan
Hacking
🇺🇸
Cyber Crusader
2026-10-06 08:07:50
(2 weeks ago)
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan
Hacking
Brute-Force
2026-10-02 07:39:53
(2 weeks ago)
denied Telnet access attempt. destination port 23.
Port Scan
Brute-Force
2026-10-01 19:28:52
(2 weeks ago)
Tried our host z.
Port Scan
Hacking
Exploited Host
🇰🇷
2048
2026-09-29 07:03:58
(3 weeks ago)
Telnet credential brute-force observed by honeypot.
Source IP: 46.98.61.36
Targeted device: DVR
Firs ...
show more
Telnet credential brute-force observed by honeypot.
Source IP: 46.98.61.36
Targeted device: DVR
First seen: 29 Sep 2026 07:03:58 UTC
Last seen: 29 Sep 2026 07:03:58 UTC
Attempts: 1
Sample credentials: root:root123
show less
Brute-Force
IoT Targeted
🇺🇸
RAP
2026-09-26 19:16:49
(3 weeks ago)
2026-09-26 19:16:49 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸
MPL
2026-09-25 16:45:07
(3 weeks ago)
tcp/23
Port Scan
🇺🇸
MPL
2026-09-14 15:06:53
(1 month ago)
tcp/23 (2 or more attempts)
Port Scan
2026-09-04 06:48:53
(1 month ago)
denied Telnet access attempt. destination port 23.
Port Scan
Brute-Force
