🇨🇿
lp
2025-08-29 10:53:43
(9 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 85.239.58.137
2025-08-29T12:33:46+02: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 85.239.58.137
2025-08-29T12:33:46+02:00 vpn Access-Reject 'guest' station: 85.239.58.137 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-08-18 12:54:58
(9 months ago)
WP Login Scan Activities
Web App Attack
2025-08-18 00:02:49
(9 months ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇪🇸
el-brujo
2025-08-17 22:49:29
(9 months ago)
[Mon Aug 18 00:49:28.240303 2025] [proxy_fcgi:error] [pid 2101639:tid 2102701] [remote 85.239.58.137 ...
show more
[Mon Aug 18 00:49:28.240303 2025] [proxy_fcgi:error] [pid 2101639:tid 2102701] [remote 85.239.58.137:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com
[Mon Aug 18 00:49:29.368521 2025] [proxy_fcgi:error] [pid 2101639:tid 2102566] [remote 85.239.58.137:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-08-17 10:34:41
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 85.239.58.137 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 85.239.58.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 17 06:34:33.302332 2025] [security2:error] [pid 29021:tid 29021] [client 85.239.58.137:59877] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||datedraft.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "datedraft.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aKGwOTzgipvWkU-dWDY93wAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2025-08-16 22:24:53
(9 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 8/16/2025 10:24 pm (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2025-08-15 20:21:33
(9 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 8/15/2025 8:21 pm (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇦🇺
afleventoffice.com.au
2025-08-15 13:42:07
(9 months ago)
GET /wp-json/wp/v2/users HTTP/1.1
Web App Attack
2024-12-14 00:17:55
(1 year ago)
Attempted brute force login to web vpn
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2024-10-06 08:29:49
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 85.239.58.137 (visit.keznews.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 85.239.58.137 (visit.keznews.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 06 04:29:42.177925 2024] [security2:error] [pid 29630:tid 29630] [client 85.239.58.137:41385] [client 85.239.58.137] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pastorg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pastorg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZwJKdupCsPt5NFZZjeC3xAAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack