🇺🇸
nationaleventpros.com
2026-09-05 09:34:16
(48 minutes ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-09-05 01:05:42
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 185.102.112.52 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.102.112.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 21:05:37.705532 2026] [security2:error] [pid 18834:tid 18834] [client 185.102.112.52:18369] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||summitartists.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "summitartists.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aptq4V6C238RWBh4ZG_7DgAAACw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 20:36:52
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 185.102.112.52 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.102.112.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 16:36:47.994769 2026] [security2:error] [pid 7906:tid 7906] [client 185.102.112.52:14991] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||diveshop-pr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "diveshop-pr.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apnaX79Kv79LWa94NrTxpwAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-03 04:36:28
(2 days ago)
WordPress login attempt
Brute-Force
2026-09-01 17:51:50
(3 days ago)
FPROCO WEBEXPLOIT 185.102.112.52 (185.102.112.52)
Web App Attack
🇺🇸
kosada.com
2026-08-28 22:48:05
(1 week ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-08-28 22:05:52
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 185.102.112.52 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.102.112.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 18:05:48.714577 2026] [security2:error] [pid 20133:tid 20133] [client 185.102.112.52:31187] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||soereng.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "soereng.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apIGPC0yE4j8yspsvTrVlAAAABc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-08-27 00:00:10
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-08-26 17:07:05
(1 week ago)
PARMACOM WEBEXPLOIT 185.102.112.52 (185.102.112.52)
Web App Attack
🇮🇹
VHosting
2026-08-18 21:20:05
(2 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
kosada.com
2026-08-18 20:53:29
(2 weeks ago)
Web password guessing
Brute-Force
2026-08-17 04:23:54
(2 weeks ago)
FPROCO WEBEXPLOIT 185.102.112.52 (185.102.112.52)
Web App Attack
🇺🇸
Al Coholic
2026-08-11 23:26:37
(3 weeks ago)
Detected By Fail2ban
Hacking
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-07 00:34:59
(4 weeks ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-08-06 01:10:10
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 185.102.112.52 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.102.112.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 21:10:07.118652 2026] [security2:error] [pid 3870641:tid 3870641] [client 185.102.112.52:43197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||misscrankypants.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "misscrankypants.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anPe7xx4HJpu7RpTaxtQJAAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
