🇨🇴
conexcol
2026-11-05 17:35:30
UTC ·
(1 day ago)
76.175.196.168 (US/United States/syn-076-175-196-168.res.spectrum.com), 15 distributed smtpauth attacks on account [
[email protected] ] in the last 3600 secs
Brute-Force
🇳🇱
maxxsense
2026-11-05 15:22:28
UTC ·
(1 day ago)
76.175.196.168 (US/United States/syn-076-175-196-168.res.spectrum.com), 12 distributed imapd attacks on account [redacted]
Brute-Force
🇺🇸
lostswordfish.com
2026-11-05 09:56:04
UTC ·
(1 day ago)
Wordfence waf block on madesimpleskincare
Web App Attack
🇮🇩
IndoAbuse
2026-11-05 04:51:09
UTC ·
(2 days ago)
Wordfence 503 block: Repeated malicious requests and bot attacks blocked by WAF.
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-11-05 01:10:01
UTC ·
(2 days ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-11-04 11:26:10
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 76.175.196.168 (syn-076-175-196-168.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 06:26:07.420386 2026] [security2:error] [pid 5285:tid 52 ...
show more
(mod_security) mod_security (id:225170) triggered by 76.175.196.168 (syn-076-175-196-168.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 06:26:07.420386 2026] [security2:error] [pid 5285:tid 5285] [client 76.175.196.168:56872] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hydrusdetergents.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hydrusdetergents.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ausWT2wjh0shpU7M2IZ2XAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-11-04 10:24:35
UTC ·
(2 days ago)
Web App Attack
Web App Attack
2026-11-04 08:54:06
UTC ·
(2 days ago)
[news.tmg.gr] httpd-suspicious-path: sites=www.amli2018.com; logs=/var/log/httpd/domains/amli2018.com.log; samples=/wp-json/wp/v2/users?per_page=50&_embed&_fields=id,slug,name | /wp-json/wp/v2/users?include=1&_fields=id,slug,name | /index.php/wp-json ...
show more
[news.tmg.gr] httpd-suspicious-path: sites=www.amli2018.com; logs=/var/log/httpd/domains/amli2018.com.log; samples=/wp-json/wp/v2/users?per_page=50&_embed&_fields=id,slug,name | /wp-json/wp/v2/users?include=1&_fields=id,slug,name | /index.php/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1
show less
Hacking
Web App Attack
🇨🇿
Countryman
2026-11-04 01:10:06
UTC ·
(3 days ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-11-02 01:10:01
UTC ·
(5 days ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-11-01 04:21:38
UTC ·
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 76.175.196.168 (syn-076-175-196-168.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 00:21:31.592742 2026] [security2:error] [pid 7516:tid 75 ...
show more
(mod_security) mod_security (id:225170) triggered by 76.175.196.168 (syn-076-175-196-168.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 00:21:31.592742 2026] [security2:error] [pid 7516:tid 7516] [client 76.175.196.168:36580] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||amlanddgtours.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "amlanddgtours.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aua-SwGVNH-uSorDJiBH8QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-10-30 08:48:40
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 76.175.196.168
2026-10-30T09:30:26+0100 vpn Access-Reject station: 76.175.196.168
Brute-Force
Web App Attack
🇩🇪
LRob
2026-10-22 11:59:55
UTC ·
(2 weeks ago)
Code forge crawl (headless) | path: /Shieldlist/shieldlist-agent/commit/67a296880f1b551f666635c15565863378e29f36.diff | src_port: 37342
Bad Web Bot
🇫🇷
masterguru
2026-10-22 08:13:59
UTC ·
(2 weeks ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)
Hacking
🇺🇸
TPI-Abuse
2026-10-22 04:28:43
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 76.175.196.168 (syn-076-175-196-168.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:28:39.600967 2026] [security2:error] [pid 29898:tid 2 ...
show more
(mod_security) mod_security (id:225170) triggered by 76.175.196.168 (syn-076-175-196-168.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:28:39.600967 2026] [security2:error] [pid 29898:tid 29898] [client 76.175.196.168:46886] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ciptaconindotara.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ciptaconindotara.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atmQ9wskIbZFtD6zfveXIgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
