🇬🇧
relianoid.com
2026-08-28 18:44:18
(1 day ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇺🇸
TPI-Abuse
2026-08-09 18:13:28
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 140.235.170.242 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 140.235.170.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 09 14:13:20.697695 2026] [security2:error] [pid 31862:tid 31862] [client 140.235.170.242:25649] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aldrich.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aldrich.us"] [uri "/wp-json/wp/v2/users"] [unique_id "anjDQJCHG0bxxYNAHwV6WAAAAB0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-07-29 02:38:19
(1 month ago)
[redacted] 140.235.170.242 - - [29/Jul/2026:03:38:15 +0100] "GET /[redacted] HTTP/1.1" 302 1517 0/61 ...
show more
[redacted] 140.235.170.242 - - [29/Jul/2026:03:38:15 +0100] "GET /[redacted] HTTP/1.1" 302 1517 0/61367 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 140.235.170.242 - - [29/Jul/2026:03:38:17 +0100] "GET /[redacted] HTTP/1.1" 302 1517 0/45376 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 14:41:30
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 140.235.170.242 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 140.235.170.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 10:41:23.805493 2026] [security2:error] [pid 25827:tid 25827] [client 140.235.170.242:57501] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||washcountyfair.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "washcountyfair.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akUnE2kcAxc8kygtlQ8vGAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-17 02:03:57
(2 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 140.235.170.242 (US/United States/-): 1 in the ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 140.235.170.242 (US/United States/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-06-10 09:16:46
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 140.235.170.242 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 140.235.170.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 05:16:41.539960 2026] [security2:error] [pid 14529:tid 14529] [client 140.235.170.242:29105] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cgiaquaticcare.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cgiaquaticcare.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aikreRyis3INpsDnNkubVwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 06:49:31
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 140.235.170.242 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 140.235.170.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 02:49:25.471407 2026] [security2:error] [pid 29973:tid 29973] [client 140.235.170.242:14845] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||danharrisphotoart.com|F|2"] [data ".dpreview.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "danharrisphotoart.com"] [uri "/www.dpreview.com"] [unique_id "agAqdcIZwLXNOj_DA-3R1QAAAAg"], referer: https://danharrisphotoart.com/checklist.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-10-22 20:31:28
(10 months ago)
IM360 WAF: Attempt to upload malware
Hacking
