🇵🇱
IROK
2026-03-16 10:20:38
(2 months ago)
Firewall Blocked - Unauthorized Port Scanning
...
Port Scan
🇺🇸
canine.tools
2026-03-16 03:20:40
(2 months ago)
[fail2ban Auto Report] {"time":"2026-03-15T23:20:39.645943769-04:00","level":"INFO","source":{"funct ...
show more
[fail2ban Auto Report] {"time":"2026-03-15T23:20:39.645943769-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/anubis-release/lib/anubis.go","line":307},"msg":"explicit deny","subsystem":"anubis","host":"searxng.canine.tools","method":"GET","path":"/search","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51","accept_language":"en-US,en;q=0.9","priority":"u=0, i","x-forwarded-for":"47.79.40.38","x-real-ip":"47.79.40.38","check_result":{"name":"bot/alibaba-cloud","rule":"DENY","weight":0}}
...
show less
Bad Web Bot
🇮🇹
VHosting
2026-03-15 20:31:32
(2 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇬🇧
catalink.com
2025-11-01 15:15:22
(7 months ago)
Brute forcing Wordpress login
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-10-31 02:08:55
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 47.79.40.38 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 47.79.40.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 22:08:49.896846 2025] [security2:error] [pid 1366:tid 1366] [client 47.79.40.38:49768] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||interiorsolutions-stuart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "interiorsolutions-stuart.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQQaMdHpqSBlpTwEh3VMvQAAAA4"], referer: https://interiorsolutions-stuart.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-29 01:41:53
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 47.79.40.38 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 47.79.40.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 21:41:47.065293 2025] [security2:error] [pid 11682:tid 11682] [client 47.79.40.38:56184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQFw2706gR03hVGNYPs-KgAAAAY"], referer: https://jolankagroup.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2025-10-06 15:26:30
(8 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 25
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-10-06 10:08:21
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 47.79.40.38 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 47.79.40.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 06:08:13.992168 2025] [security2:error] [pid 3426489:tid 3426489] [client 47.79.40.38:58844] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bernsteinip.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOOVDXzxf7C8-qzncmXi2wAAAAo"], referer: https://bernsteinip.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-06-22 05:37:30
(11 months ago)
Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH