🇹🇷
rtbh.com.tr
2026-02-21 20:11:41
(3 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
MPL
2026-02-13 19:44:14
(3 months ago)
tcp/34311 (9 or more attempts)
Port Scan
🇺🇸
MPL
2026-02-13 19:21:53
(3 months ago)
tcp/34311 (58 or more attempts)
Port Scan
2025-11-26 00:22:08
(6 months ago)
scanning http requests from known botnet
Web App Attack
🇺🇸
TPI-Abuse
2025-11-10 20:32:24
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 15:32:18.069789 2025] [security2:error] [pid 8184:tid 8184] [client 102.129.252.111:39040] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||reyadecostarica.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "reyadecostarica.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRJL0qo3MyPErNCiPCOv3wAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2025-11-10 16:48:12
(7 months ago)
WordPress bruteforce
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-11-10 14:21:01
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 09:20:57.400618 2025] [security2:error] [pid 31680:tid 31680] [client 102.129.252.111:38346] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pkermis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pkermis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRH0yaS1lkAF1V1MxpgE2QAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-10 14:05:11
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 09:05:04.863390 2025] [security2:error] [pid 3212:tid 3212] [client 102.129.252.111:46478] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tanny.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tanny.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRHxEFNkZ-1eHS5L6W5t9gAAACM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-10 11:22:27
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 06:22:23.472558 2025] [security2:error] [pid 4079762:tid 4079762] [client 102.129.252.111:53012] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kfraser.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kfraser.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRHK74WnWtCOItsPRkfFfQAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-10 10:39:41
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 05:39:34.494980 2025] [security2:error] [pid 21059:tid 21125] [client 102.129.252.111:54136] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ardentsi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ardentsi.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRHA5oV_96g6xpS9127q9QAAAIc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-09 14:40:27
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 09:40:23.317301 2025] [security2:error] [pid 31262:tid 31262] [client 102.129.252.111:34980] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||geckoturner.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "geckoturner.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRCn12y050leEXJv1flvqwAAABM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-09 13:29:08
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 08:29:01.981428 2025] [security2:error] [pid 13086:tid 13086] [client 102.129.252.111:43762] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ejnes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ejnes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRCXHYvfTlpuEQGDd1D_cwAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
[email protected]
2025-11-09 07:11:22
(7 months ago)
Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on exlibrisband.com (User ...
show more
Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on exlibrisband.com (User enumeration scan (WP REST API)) 102.129.252.111 (US/United States/-): 1 in the last 3600 secs (CF_ENABLE); IP: 102.129.252.111; Ports: *; Direction: 0; Trigger: LF_CUSTOMTRIGGER;
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-09 04:08:40
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.252.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 23:08:32.689269 2025] [security2:error] [pid 409:tid 409] [client 102.129.252.111:46350] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jwphotodesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jwphotodesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRATwGDVRO2ZQjY9ebGCTgAAACg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-11-09 02:50:03
(7 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot