🇺🇸
www.winos.me
2026-01-24 19:32:17
(4 months ago)
Banned due to high error rate on HTTP/1.1 protocol
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-01-20 11:44:18
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 140.235.1.217 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 140.235.1.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 06:44:12.079678 2026] [security2:error] [pid 17546:tid 17546] [client 140.235.1.217:14267] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||web146.dnchosting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "web146.dnchosting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aW9qjNaxRPY_csD2BlB9_AAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-01-16 08:37:26
(4 months ago)
[redacted] 140.235.1.217 - - [16/Jan/2026:09:37:22 +0100] "GET /[redacted] HTTP/1.1" 302 1572 0/2970 ...
show more
[redacted] 140.235.1.217 - - [16/Jan/2026:09:37:22 +0100] "GET /[redacted] HTTP/1.1" 302 1572 0/29704 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 140.235.1.217 - - [16/Jan/2026:09:37:25 +0100] "GET /[redacted] HTTP/1.1" 302 1573 0/37097 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2026-01-14 21:47:05
(4 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 1/14/2026 9:47 pm (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
[email protected]
2025-10-17 00:07:28
(7 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2025-10-17T00:07:28Z
Brute-Force
🇳🇱
exxos
2025-10-08 07:06:03
(8 months ago)
HTTP1.x attacks
DDoS Attack
🇺🇸
TPI-Abuse
2025-08-17 21:50:49
(9 months ago)
(mod_security) mod_security (id:210831) triggered by 140.235.1.217 (140-235-1-217.cloudairone.com): ...
show more
(mod_security) mod_security (id:210831) triggered by 140.235.1.217 (140-235-1-217.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 17 17:50:37.907690 2025] [security2:error] [pid 11156:tid 11156] [client 140.235.1.217:18439] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||backstore.com|F|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/usage_202508.html"] [unique_id "aKJOrQGn6IG2-9LVa8TV-wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2025-05-10 18:03:02
(1 year ago)
Accessed trap at '/wp-login.php'
Web App Attack