2026-02-11 06:06:29
(4 months ago)
wordpress-trap
Web App Attack
2025-12-11 12:32:38
(6 months ago)
botnet
DDoS Attack
🇩🇪
marzzzello
2025-12-09 01:13:51
(6 months ago)
Ports: 25x 17786
Port Scan
🇺🇸
TPI-Abuse
2025-11-12 11:33:11
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.252.46 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.252.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 06:33:08.244661 2025] [security2:error] [pid 347:tid 347] [client 102.129.252.46:52404] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||darrenpeck.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "darrenpeck.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRRwdA8lRAsGOD7QY7PRVwAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-12 06:23:39
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.252.46 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.252.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 01:23:32.831446 2025] [security2:error] [pid 18565:tid 18565] [client 102.129.252.46:38628] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gonzalez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRQn5MHRG5ZgnOl2cIVTyAAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-11-12 05:55:02
(7 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
xmission.com
2025-09-17 08:03:42
(9 months ago)
Blocked by UFW (TCP on 60633)
Source port: 50343
TTL: 119
Packet length: 52
TOS: 0x08
This report ( ...
show more
Blocked by UFW (TCP on 60633)
Source port: 50343
TTL: 119
Packet length: 52
TOS: 0x08
This report (for 102.129.252.46) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
xmission.com
2025-09-16 18:51:39
(9 months ago)
Blocked by UFW (TCP on 60633)
Source port: 64693
TTL: 119
Packet length: 52
TOS: 0x08
This report ( ...
show more
Blocked by UFW (TCP on 60633)
Source port: 64693
TTL: 119
Packet length: 52
TOS: 0x08
This report (for 102.129.252.46) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
2025-09-03 19:30:43
(9 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.03 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.03 is noted in report timestamp
show less
Hacking
Brute-Force
🇮🇹
VHosting
2025-07-21 02:35:03
(10 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-06-23 07:44:02
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 102.129.252.46 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.252.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 03:43:54.583349 2025] [security2:error] [pid 2494059:tid 2494185] [client 102.129.252.46:37065] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eliteproductions.tv|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eliteproductions.tv"] [uri "/wp-json/wp/v2/users/"] [unique_id "aFkFuo2djODwYOVWYQ31vAAAAQI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-02 18:42:38
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 102.129.252.46 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 102.129.252.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 02 14:42:34.592691 2025] [security2:error] [pid 3952124:tid 3952124] [client 102.129.252.46:51764] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cnprcertificationreviews.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnprcertificationreviews.org"] [uri "/facebook.com"] [unique_id "aD3wmmgEJInusKIKDn9glgAAAAA"], referer: https://cnprcertificationreviews.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stalker.to
2025-05-22 04:43:19
(1 year ago)
Datacenter Proxy
Web Spam
🇩🇪
stalker.to
2025-05-21 18:05:29
(1 year ago)
Datacenter Proxy
Web Spam
🇺🇸
oncord
2025-05-10 08:36:53
(1 year ago)
Form spam
Web Spam