🇮🇩
Namor
2026-08-18 21:40:53
(2 weeks ago)
Port Scan
SSH
IoT Targeted
🇺🇸
kosada.com
2026-07-30 19:05:01
(1 month ago)
Web vulnerability probing: /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-29 00:12:33
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 88.218.45.220 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 88.218.45.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 20:12:25.339565 2026] [security2:error] [pid 2500211:tid 2500211] [client 88.218.45.220:61001] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||roumer.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "roumer.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amlFacCeMJmBUvnFHwRTaQAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-07-28 15:25:50
(1 month ago)
WP User Enumeration, WP Author Enumeration
Web App Attack
🇨🇦
DRI
2026-07-23 20:28:46
(1 month ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 22:33:41
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 88.218.45.220 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 88.218.45.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 18:33:37.843023 2026] [security2:error] [pid 5555:tid 5555] [client 88.218.45.220:63511] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||k-h-w.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "k-h-w.com"] [uri "/wp-json/wp/v2/users"] [unique_id "allcQSDapTT0nLv14cXYLwAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-16 20:29:38
(1 month ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-03-17 07:56:31
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 88.218.45.220 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 88.218.45.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 03:56:24.096933 2026] [security2:error] [pid 12069:tid 12069] [client 88.218.45.220:12333] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||savannah-house.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "savannah-house.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abkJKGBTnfy9ERCH1hwrTgAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 18:02:58
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 88.218.45.220 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 88.218.45.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 14:02:53.336745 2026] [security2:error] [pid 14368:tid 14368] [client 88.218.45.220:57067] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotjive.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotjive.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abWizR2ba1ml7vsEKqOgxQAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-09-02 17:16:14
(2 years ago)
Unauthorized connection to Telnet port 23
Port Scan
🇺🇸
hostseries
2024-04-05 20:14:29
(2 years ago)
Trigger: LF_DISTATTACK
Brute-Force
2023-01-20 15:47:27
(3 years ago)
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fai ...
show more
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2023-01-19 time=11:40:12 devname=FG200E4Q16901016 devid=FG200E4Q16901016 logid=0101039426 type=event subtype=vpn level=alert vd=root logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=88.218.45.220 user="admin" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in"
show less
VPN IP
2023-01-20 13:52:17
(3 years ago)
Unauthorized VPN login attempt (on R).
VPN IP
Hacking
Brute-Force
2022-02-25 20:39:05
(4 years ago)
Hit honeypot r.
Port Scan
Hacking
Exploited Host
