🇫🇮
stinpriza
2026-10-26 21:10:29
(6 hours ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 14:19:41
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.102.112.34 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 185.102.112.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 10:19:36.202627 2026] [security2:error] [pid 18898:tid 18898] [client 185.102.112.34:44823] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||franklincountyquilters.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "franklincountyquilters.org"] [uri "/fcqgshowntell0623/target16.html"] [unique_id "at4P-Ee9sO7DxUhgo1Vl6AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-25 21:29:12
(1 month ago)
This address sends abusive requests to WordPress sites we host: user enumeration through the REST AP ...
show more
This address sends abusive requests to WordPress sites we host: user enumeration through the REST API, xmlrpc.php calls the site refuses, endpoints the site does not serve. These are the reconnaissance and attack calls of automated WordPress attack tools, blocked on sight. Please check the machine behind it. | method: GET | path: /wp-login.php | 2026-09-25 21:29 UTC
show less
Web App Attack
Hacking
🇫🇷
Tilellit.PRO
2026-05-22 06:31:52
(5 months ago)
Fail2Ban banned 185.102.112.34 for security violations in jail wp-armour. Log: 2026/05/22 06:31:52 [ ...
show more
Fail2Ban banned 185.102.112.34 for security violations in jail wp-armour. Log: 2026/05/22 06:31:52 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.102.112.34 | Target: wplogin" , client: 185.102.112.34, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-05-21 15:30:18
(5 months ago)
Fail2Ban banned 185.102.112.34 for security violations in jail wp-armour. Log: 2026/05/21 15:30:18 [ ...
show more
Fail2Ban banned 185.102.112.34 for security violations in jail wp-armour. Log: 2026/05/21 15:30:18 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.102.112.34 | Target: wplogin" , client: 185.102.112.34, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-05-20 03:40:54
(5 months ago)
Fail2Ban banned 185.102.112.34 for security violations in jail wp-armour. Log: 2026/05/20 03:40:54 [ ...
show more
Fail2Ban banned 185.102.112.34 for security violations in jail wp-armour. Log: 2026/05/20 03:40:54 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.102.112.34 | Target: wplogin" , client: 185.102.112.34, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2025-09-04 17:16:00
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 185.102.112.34 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 185.102.112.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 13:15:55.868032 2025] [security2:error] [pid 988:tid 988] [client 185.102.112.34:28693] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||sahinozalit.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sahinozalit.com"] [uri "/"] [unique_id "aLnJSykcsJrNvknR6TBSswAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-05-28 07:32:01
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
vestibtech
2025-03-28 09:15:59
(1 year ago)
185.102.112.34 - - [28/Mar/2025:03:15:58 -0600] "GET /wp-login.php HTTP/1.1" 301 4331 "-" "Mozilla/5 ...
show more
185.102.112.34 - - [28/Mar/2025:03:15:58 -0600] "GET /wp-login.php HTTP/1.1" 301 4331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203"
...
show less
Web App Attack
🇨🇦
wil.com
2025-03-28 08:39:10
(1 year ago)
GlobalProtect login attempts with user daoconnor.
VPN IP
Brute-Force
🇧🇪
voormedia
2025-03-23 20:13:26
(1 year ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇨🇭
backslash
2025-03-21 10:40:12
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2025-02-13 06:58:45
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.102.112.34 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.102.112.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 13 01:58:38.381815 2025] [security2:error] [pid 14247:tid 14247] [client 185.102.112.34:53607] [client 185.102.112.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barnesandbrower.com"] [uri "/.env"] [unique_id "Z62YHmWV_JkT8_wU-gXUNAAAAA0"], referer: https://tasamm.com/about/bbb17.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Cyber Crusader
2024-10-30 07:35:02
(1 year ago)
Failed to connect/bruteforce/password-spray into Admin access to network gateway
Port Scan
Hacking
Brute-Force
2024-08-21 07:28:44
(2 years ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH