🇺🇸
TPI-Abuse
2025-07-29 17:24:08
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 62.240.2.196 (196-2-240-62.static.astratelekom. ...
show more
(mod_security) mod_security (id:225170) triggered by 62.240.2.196 (196-2-240-62.static.astratelekom.rs): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 29 13:24:03.795677 2025] [security2:error] [pid 18522:tid 18522] [client 62.240.2.196:46706] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||harwoodmechanical.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "harwoodmechanical.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aIkDs5Yq_ECCjsZWgsVjCAAAAAw"], referer: https://harwoodmechanical.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Futunk
2025-07-08 12:46:50
(1 year ago)
Form spam (honeypot): POST /contact
Web Spam
2025-06-26 23:50:37
(1 year ago)
Spamming registration page
Web Spam
🇺🇸
TPI-Abuse
2025-06-23 01:14:03
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 62.240.2.196 (196-2-240-62.static.astratelekom. ...
show more
(mod_security) mod_security (id:225170) triggered by 62.240.2.196 (196-2-240-62.static.astratelekom.rs): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 22 21:13:56.230437 2025] [security2:error] [pid 2014431:tid 2014431] [client 62.240.2.196:37854] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cms2020.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cms2020.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aFiqVOXt_2aCYBJmh-otnQAAAAY"], referer: https://cms2020.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-22 20:43:33
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 62.240.2.196 (196-2-240-62.static.astratelekom. ...
show more
(mod_security) mod_security (id:225170) triggered by 62.240.2.196 (196-2-240-62.static.astratelekom.rs): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 22 16:43:28.673415 2025] [security2:error] [pid 3483241:tid 3483241] [client 62.240.2.196:54511] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||blacksheepoffroad.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blacksheepoffroad.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aFhq8EWFomwIjXz2_DtXgQAAABQ"], referer: https://blacksheepoffroad.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-21 09:18:08
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 62.240.2.196 (196-2-240-62.static.astratelekom. ...
show more
(mod_security) mod_security (id:225170) triggered by 62.240.2.196 (196-2-240-62.static.astratelekom.rs): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 21 05:17:59.430672 2025] [security2:error] [pid 2139628:tid 2139628] [client 62.240.2.196:44349] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||braintechsoftwaresolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "braintechsoftwaresolutions.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aFZ4x_IMPdiYLCswtAFJ5wAAAAM"], referer: https://braintechsoftwaresolutions.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2025-06-11 01:03:05
(1 year ago)
06/11/2025-03:03:04.856441 62.240.2.196 Protocol: 6 GPL POLICY SOCKS Proxy attempt
Port Scan
🇪🇸
el-brujo
2025-06-09 22:43:00
(1 year ago)
06/10/2025-00:42:59.932220 62.240.2.196 Protocol: 6 GPL POLICY SOCKS Proxy attempt
Port Scan
🇩🇪
zeitschel.net
2025-05-16 06:42:23
(1 year ago)
2025-05-16 08:42:12 Unauthorized /owa/auth.owa
Hacking
Web App Attack
🇪🇸
el-brujo
2025-05-08 06:11:18
(1 year ago)
05/08/2025-08:11:18.141102 62.240.2.196 Protocol: 6 ET SCAN Potential SSH Scan
Port Scan
🇨🇳
ThreatBook.io
2025-05-07 01:16:58
(1 year ago)
ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/62.240.2.196
Brute-Force
2025-05-06 08:26:50
(1 year ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.05.06 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.05.06 is noted in report timestamp
show less
Hacking
Brute-Force
2025-05-03 03:51:25
(1 year ago)
FIMPRODE WEBFORM SPAM 62.240.2.196 (196-2-240-62.static.astratelekom.rs)
Web Spam
2025-04-30 02:26:58
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-04-18 03:37:43
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH