(modsec_5015) ModSec 5015: Suspicious User-Agent from 5.181.169.212 (NL/The Netherlands/-): 1 in the ...
show more(modsec_5015) ModSec 5015: Suspicious User-Agent from 5.181.169.212 (NL/The Netherlands/-): 1 in the last 3600 secs (0-193)
show less
(mod_security) mod_security (id:225170) triggered by 5.181.169.212 (-): 1 in the last 300 secs; Port ...
show more(mod_security) mod_security (id:225170) triggered by 5.181.169.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 30 01:08:39.943324 2025] [security2:error] [pid 26712:tid 26712] [client 5.181.169.212:9507] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pattenden.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pattenden.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aNtl16vZXa6EL1gSm34DHAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried us ...
show more“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to logged in logdesc=SSL VPN login fail user=datadevscan02 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_unknown_user”
show less
Hacking
Brute-Force
Web App Attack
Anonymous
“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried us ...
show more“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to logged in logdesc=SSL VPN login fail user=datadevscan02 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_unknown_user “
show less
Unauthorized VPN login attempts: 1 attempts were recorded from 5.181.169.212
2025-03-17T01:26:06+01: ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 5.181.169.212
2025-03-17T01:26:06+01:00 vpn Access-Reject 'lamadave' station: 5.181.169.212 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less