🇺🇸
TPI-Abuse
2026-06-22 14:28:05
(7 minutes ago)
(mod_security) mod_security (id:225170) triggered by 152.42.201.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.201.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 10:27:58.764605 2026] [security2:error] [pid 28118:tid 28118] [client 152.42.201.102:55894] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||abilityengraving.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abilityengraving.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajlGblVMzjjzn2X8zqHAbQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-22 10:48:01
(3 hours ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
2026-06-22 07:34:53
(7 hours ago)
scanning for potential vulnerable apps (wordpress etc.) and database accesses (GHR). Requested URI: ...
show more
scanning for potential vulnerable apps (wordpress etc.) and database accesses (GHR). Requested URI: /license.txt
show less
Web App Attack
🇳🇱
i-turnradio.nl
2026-06-22 01:36:51
(12 hours ago)
2026-06-22 @ 03:36:50 (CET) ~ Blocked for trying to access: /wp-login.php
Web App Attack
2026-06-22 00:33:34
(14 hours ago)
CMS (WordPress or Joomla) brute force attempt.
Brute-Force
🇺🇸
TPI-Abuse
2026-06-21 16:10:35
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 152.42.201.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.201.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 12:10:29.608322 2026] [security2:error] [pid 17154:tid 17154] [client 152.42.201.102:62751] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||babylontravelone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "babylontravelone.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajgM9fFIxFrKRjhsTqy7BAAAACQ"], referer: https://duckduckgo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
i-turnradio.nl
2026-06-21 14:20:30
(1 day ago)
2026-06-21 @ 16:20:29 (CET) ~ Blocked for trying to access: /wp-login.php
Web App Attack
🇫🇷
dynamix
2026-06-21 03:40:39
(1 day ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
masterguru
2026-06-21 03:03:59
(1 day ago)
(wordpress) Apache: Failed WordPress login from 152.42.201.102 (SG/Singapore/-): 10 in the last 3600 ...
show more
(wordpress) Apache: Failed WordPress login from 152.42.201.102 (SG/Singapore/-): 10 in the last 3600 secs (0-169)
show less
Hacking
🇮🇹
VHosting
2026-06-21 02:25:03
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇧🇪
Saec
2026-06-21 01:30:44
(1 day ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (1× on saec.me)
Port Scan
Web App Attack
🇺🇸
Rayulcifer
2025-10-12 18:00:27
(8 months ago)
152.42.201.102 - - [12/Oct/2025:13:00:25 -0500] "CONNECT democrazy.id:443 HTTP/1.1" 502 583 "-" "-"
...
show more
152.42.201.102 - - [12/Oct/2025:13:00:25 -0500] "CONNECT democrazy.id:443 HTTP/1.1" 502 583 "-" "-"
152.42.201.102 - - [12/Oct/2025:13:00:25 -0500] "\x16\x03\x01" 400 491 "-" "-"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
🇺🇸
Rayulcifer
2025-10-11 15:28:10
(8 months ago)
152.42.201.102 - - [11/Oct/2025:10:28:09 -0500] "CONNECT democrazy.id:443 HTTP/1.1" 502 583 "-" "-"
...
show more
152.42.201.102 - - [11/Oct/2025:10:28:09 -0500] "CONNECT democrazy.id:443 HTTP/1.1" 502 583 "-" "-"
152.42.201.102 - - [11/Oct/2025:10:28:09 -0500] "\x16\x03\x01" 400 491 "-" "-"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
🇺🇸
Rayulcifer
2025-10-10 14:05:25
(8 months ago)
152.42.201.102 - - [10/Oct/2025:09:05:19 -0500] "CONNECT democrazy.id HTTP/1.1" 400 491 "-" "-"
152. ...
show more
152.42.201.102 - - [10/Oct/2025:09:05:19 -0500] "CONNECT democrazy.id HTTP/1.1" 400 491 "-" "-"
152.42.201.102 - - [10/Oct/2025:09:05:24 -0500] "CONNECT democrazy.id HTTP/1.1" 400 491 "-" "-"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
🇺🇸
mnsf
2025-09-29 03:05:17
(8 months ago)
Too many Status 40X (14)
Brute-Force
Web App Attack