🇩🇪
FeG Deutschland
2026-11-10 11:56:05
UTC ·
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:23:03
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 102.204.91.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:22:57.333971 2026] [security2:error] [pid 3138:tid 3138] [client 102.204.91.92:43310] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 102.204.91.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:22:57.333971 2026] [security2:error] [pid 3138:tid 3138] [client 102.204.91.92:43310] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jvwebinars.vanemby.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jvwebinars.vanemby.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avLUYUcP3cfaNiC57wwhHwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
justbible
2026-11-09 06:06:34
UTC ·
(3 days ago)
HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 9 requests from 2026-11-09T06:06:34+00:00 to 2026-11-11T08:26:27+00:00, e.g. 'GET /en/bbe,esv,lsv/acts/17/29 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; Win64; x ...
show more
HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 9 requests from 2026-11-09T06:06:34+00:00 to 2026-11-11T08:26:27+00:00, e.g. 'GET /en/bbe,esv,lsv/acts/17/29 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36'. Forged browser headers; spoofed user agent (did not identify itself as a bot); robots.txt ignored (a disallowed URL requested).
show less
Bad Web Bot
🇪🇸
Mugen
2026-11-08 00:26:28
UTC ·
(4 days ago)
Unauthorized VPN login attempts
Brute-Force
🇩🇪
nyuuzyou
2026-11-06 11:40:01
UTC ·
(6 days ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-06T11:40:01Z.
Bad Web Bot
🇧🇷
ICS Labs
2026-11-04 14:37:34
UTC ·
(1 week ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-04 UTC.
Brute-Force
🇩🇪
ghostwarriors
2026-11-04 04:20:35
UTC ·
(1 week ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-11-04 04:14:50
UTC ·
(1 week ago)
2026/11/04 05:14:50 [error] 23893#845130: *1941237 access forbidden by rule, client: 102.204.91.92, server: new.hondaforum.hu, request: "GET /topic/honda-s2000/961922/ HTTP/1.1", host: "new.hondaforum.hu"
...
Web Spam
🇩🇪
nyuuzyou
2026-11-03 15:12:13
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-03T15:12:13Z.
Bad Web Bot
🇩🇪
nyuuzyou
2026-11-03 11:39:00
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-03T11:39:00Z.
Bad Web Bot
🇨🇿
lp
2026-11-03 11:33:07
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 102.204.91.92
2026-11-03T12:18:16+0100 vpn Access-Reject station: 102.204.91.92
Brute-Force
Web App Attack
🇺🇸
鬼影233
2026-10-29 06:41:37
UTC ·
(2 weeks ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Bad Web Bot
🇳🇱
maxxsense
2026-10-27 16:24:55
UTC ·
(2 weeks ago)
102.204.91.92 (KE/Kenya/-), 12 distributed imapd attacks on account [redacted]
Brute-Force
🇮🇹
CoreTech srl
2026-10-25 18:38:57
UTC ·
(2 weeks ago)
cloudlinux2 fail2ban: 2026-10-25 19:33:49,004 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 136.144.35.185 - 2026-10-25 19:33:48cloudlinux2 fail2ban: 2026-10-25 19:33:53,538 fail2ban.filter [1922]: INFO [plesk-wordpress] ...
show more
cloudlinux2 fail2ban: 2026-10-25 19:33:49,004 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 136.144.35.185 - 2026-10-25 19:33:48cloudlinux2 fail2ban: 2026-10-25 19:33:53,538 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 216.73.161.92 - 2026-10-25 19:33:52cloudlinux2 fail2ban: 2026-10-25 19:33:48,504 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 136.144.35.167 - 2026-10-25 19:33:47cloudlinux2 fail2ban: 2026-10-25 19:34:57,695 fail2ban.filter [1922]: INFO [plesk-modsecurity] Found 115.60.151.4 - 2026-10-25 19:34:57cloudlinux2 fail2ban: 2026-10-25 19:35:09,738 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 193.56.116.74 - 2026-10-25 19:35:09cloudlinux2 fail2ban: 2026-10-25 19:35:09,743 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.146.55.4 - 2026-10-25 19:35:09cloudlinux2 fail2ban: 2026-10-25 19:35:20,261 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 160.155.129.141 - 2026-10-25 19:35:18cloudl
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 07:56:23
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 102.204.91.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 03:56:17.203611 2026] [security2:error] [pid 3156:tid 3169] [client 102.204.91.92:39450] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 102.204.91.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 03:56:17.203611 2026] [security2:error] [pid 3156:tid 3169] [client 102.204.91.92:39450] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sailcleaner.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sailcleaner.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atxkoWbZnME0kuWWl9BH3wAAAAU"], referer: https://sailcleaner.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
