🇺🇸
TPI-Abuse
2026-10-16 16:28:47
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 85.85.154.152 (152.85-85-154.dynamic.clientes.e ...
show more
(mod_security) mod_security (id:225170) triggered by 85.85.154.152 (152.85-85-154.dynamic.clientes.euskaltel.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:28:42.159748 2026] [security2:error] [pid 10633:tid 10633] [client 85.85.154.152:64656] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.drbolen.derekvantreese.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.drbolen.derekvantreese.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atJQumePlaIJSx84P3djIwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 14:15:07
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 85.85.154.152 (152.85-85-154.dynamic.clientes.e ...
show more
(mod_security) mod_security (id:225170) triggered by 85.85.154.152 (152.85-85-154.dynamic.clientes.euskaltel.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:14:58.805646 2026] [security2:error] [pid 21377:tid 21377] [client 85.85.154.152:64348] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wwfstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wwfstudio.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atIxYv5SQV7QjhJPhf-KlAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 03:38:43
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 85.85.154.152 (152.85-85-154.dynamic.clientes.e ...
show more
(mod_security) mod_security (id:225170) triggered by 85.85.154.152 (152.85-85-154.dynamic.clientes.euskaltel.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 23:38:33.458456 2026] [security2:error] [pid 15395:tid 15419] [client 85.85.154.152:65140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||georgementz.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "georgementz.org"] [uri "/wp-json/wp/v2/users"] [unique_id "atBKub6RQOVQ1G1OFkeMiwAAAJY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-30 13:52:31
(2 weeks ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 85.85.154.152
2026-09-30T15:40:04+02: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 85.85.154.152
2026-09-30T15:40:04+02:00 vpn Access-Reject 'bart19' station: 85.85.154.152 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-30 00:10:01
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-09-28 17:07:44
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 85.85.154.152 (152.85-85-154.dynamic.clientes.e ...
show more
(mod_security) mod_security (id:225170) triggered by 85.85.154.152 (152.85-85-154.dynamic.clientes.euskaltel.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 13:07:41.404316 2026] [security2:error] [pid 1009:tid 1009] [client 85.85.154.152:64416] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||warpedweed.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "warpedweed.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arqe3TWXe-ZAf-N6ZF-lMQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-20 04:55:08
(3 weeks ago)
WordPress login attempt
Brute-Force
🇩🇪
cloudmax
2026-09-19 21:29:30
(3 weeks ago)
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ...
show more
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
show less
Port Scan