🇫🇷
masterguru
2026-04-06 07:18:19
(1 month ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 68.183.74.46 (DE/Germany/-): 1 in the ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 68.183.74.46 (DE/Germany/-): 1 in the last 3600 secs (0-197)
show less
Hacking
🇦🇹
centurion
2026-04-06 04:31:38
(1 month ago)
Unauthorized attempt on cendev [8081/tcp]
Source port: 61002
TTL: 246
Packet length: 44
TOS: 0x00
ht ...
show more
Unauthorized attempt on cendev [8081/tcp]
Source port: 61002
TTL: 246
Packet length: 44
TOS: 0x00
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
MPL
2026-03-15 02:21:14
(2 months ago)
tcp/8080
Port Scan
🇷🇸
Scan
2026-03-15 01:34:39
(2 months ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇫🇷
masterguru
2026-03-15 01:21:14
(2 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 68.183.74.46 (DE/Germany/-): 1 in the ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 68.183.74.46 (DE/Germany/-): 1 in the last 3600 secs (0-201)
show less
Hacking
🇧🇪
cmbplf
2026-03-09 12:43:06
(2 months ago)
222.946 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇨🇭
Origon
2026-03-09 08:25:06
(2 months ago)
http-probing - IP: 68.183.74.46 - time="2026-03-09T09:25:06+01:00" level=info msg="(555f66b4f6a7455 ...
show more
http-probing - IP: 68.183.74.46 - time="2026-03-09T09:25:06+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 68.183.74.46 (DE/14061) : 4h ban on Ip 68.183.74.46" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-03-08 23:31:06
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 68.183.74.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.74.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 08 19:30:59.189743 2026] [security2:error] [pid 4093:tid 4093] [client 68.183.74.46:64500] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||designingdestinynow.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "designingdestinynow.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aa4GsxDX5nC6-I5lXJOCSQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-08 13:41:37
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 68.183.74.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.74.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 08 09:41:33.789475 2026] [security2:error] [pid 2519:tid 2519] [client 68.183.74.46:61057] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||desertalfas.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "desertalfas.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aa18jfnksESK6a4P1N_9RwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-08 12:41:29
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 68.183.74.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.74.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 08 08:41:24.471005 2026] [security2:error] [pid 19935:tid 19935] [client 68.183.74.46:53419] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.desdier.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.desdier.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aa1udG_Nx_myTuofN1Fu9QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-08 10:37:34
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 68.183.74.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.74.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 08 06:37:30.832085 2026] [security2:error] [pid 15462:tid 15462] [client 68.183.74.46:49808] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.desarrollosdecolima.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.desarrollosdecolima.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aa1RarQHmaWxWhv9GJtNUgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-03-08 07:41:33
(2 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php?rsd
Hacking
🇺🇸
TPI-Abuse
2026-03-08 06:42:22
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 68.183.74.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.74.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 08 01:42:18.111246 2026] [security2:error] [pid 14610:tid 14610] [client 68.183.74.46:55045] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.deolu.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.deolu.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aa0aSr325FAEtjgWrENpAAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-03-06 22:59:43
(2 months ago)
Auto-ban: 14 malicious requests on 2026-03-05 (e.g., env/backup probes, brute-force, or error bursts ...
show more
Auto-ban: 14 malicious requests on 2026-03-05 (e.g., env/backup probes, brute-force, or error bursts).
show less
Web App Attack
SSH
Hacking
🇨🇭
rt
2026-03-05 16:26:36
(3 months ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack