2026-04-04 11:20:45
(2 months ago)
Forum/form spam
Web Spam
🇺🇸
xmission.com
2026-03-19 01:03:08
(3 months ago)
Blocked by UFW (TCP on 9050)
Source port: 50740
TTL: 119
Packet length: 52
TOS: 0x08
This report (f ...
show more
Blocked by UFW (TCP on 9050)
Source port: 50740
TTL: 119
Packet length: 52
TOS: 0x08
This report (for 102.129.232.94) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇮🇹
VHosting
2026-02-18 22:39:15
(4 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇩🇪
barbarella
2025-12-19 12:02:45
(6 months ago)
Illegal http header rejected by modsecurity (GET /)
Hacking
Web App Attack
2025-12-11 23:01:45
(6 months ago)
botnet
DDoS Attack
2025-12-03 11:58:39
(6 months ago)
botnet
DDoS Attack
🇨🇭
backslash
2025-11-10 15:45:03
(7 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-10 15:36:58
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.232.94 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.232.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 10:36:55.202204 2025] [security2:error] [pid 3736:tid 3736] [client 102.129.232.94:39178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||saratogaequity.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "saratogaequity.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRIGlzLVE4e898-DC4YVlwAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-10 15:19:43
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.232.94 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.232.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 10:19:37.894538 2025] [security2:error] [pid 30245:tid 30245] [client 102.129.232.94:33434] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||edenberg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "edenberg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRICiQdO0-N0nKXXmoE8HwAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-10 12:25:03
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.232.94 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.232.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 07:24:55.302440 2025] [security2:error] [pid 15828:tid 15828] [client 102.129.232.94:34166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||goodpage.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "goodpage.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRHZl6joxN-wJE0mK7hU3AAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-10 10:46:31
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.232.94 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.232.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 05:46:25.183856 2025] [security2:error] [pid 14466:tid 14466] [client 102.129.232.94:47702] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pages4you.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pages4you.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRHCgZQSyPBF1YkOxiVWQQAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-26 13:10:43
(7 months ago)
(smtpauth) Failed SMTP AUTH login from 102.129.232.94 (US/United States/-)
Brute-Force
2025-10-25 03:00:27
(7 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2025-10-23 16:37:20
(7 months ago)
(sshd) Failed SSH login from 102.129.232.94 (US/United States/-)
Brute-Force
SSH
🇳🇱
nitrix
2025-09-20 00:30:09
(9 months ago)
ZMap scanning detected
Port Scan
Hacking