🇺🇸
TPI-Abuse
2026-10-15 12:07:55
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 185.94.34.78 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 185.94.34.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:07:52.739413 2026] [security2:error] [pid 5464:tid 5464] [client 185.94.34.78:25755] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||versallis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "versallis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atDCGDvxRwpggXP6a7HAXAAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 09:07:11
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 185.94.34.78 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 185.94.34.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:07:04.272375 2026] [security2:error] [pid 3643:tid 3643] [client 185.94.34.78:53877] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||churchtop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "churchtop.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asyjOOXsUkoYKkCa1i_AKQAAAI0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 15:18:39
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 185.94.34.78 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.34.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 11:18:33.959713 2026] [security2:error] [pid 18253:tid 18253] [client 185.94.34.78:18353] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Lift Chairs/Comforter Wides Series/Thumbs.db"] [unique_id "asO_ya75QxV3W6cuaFwt3gAAAAI"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Lift%20Chairs/Comforter%20Wides%20Series/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 20:33:05
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 185.94.34.78 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 185.94.34.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 16:33:02.019211 2026] [security2:error] [pid 27894:tid 27894] [client 185.94.34.78:33567] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||donnysimonton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "donnysimonton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asK3_skXsiMZkG3bfp5ZtgAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-30 02:52:14
(2 weeks ago)
WordPress login attempt
Brute-Force
🇨🇭
backslash
2026-05-18 13:36:00
(4 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇨🇭
backslash
2026-04-16 14:06:02
(6 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇸🇬
securejdprop
2026-04-13 02:51:28
(6 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing
Hacking
Web App Attack
🇩🇪
LRob
2026-03-26 03:00:39
(6 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇫🇷
Tilellit.PRO
2026-02-12 10:36:47
(8 months ago)
Fail2Ban banned 185.94.34.78 for security violations in jail wp-armour. Log: 2026/02/12 10:36:46 [er ...
show more
Fail2Ban banned 185.94.34.78 for security violations in jail wp-armour. Log: 2026/02/12 10:36:46 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.94.34.78 | Target: wplogin" , client: 185.94.34.78, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-02-05 04:03:55
(8 months ago)
Fail2Ban banned 185.94.34.78 for security violations in jail wp-armour. Log: 2026/02/05 04:03:55 [er ...
show more
Fail2Ban banned 185.94.34.78 for security violations in jail wp-armour. Log: 2026/02/05 04:03:55 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.94.34.78 | Target: wplogin" , client: 185.94.34.78, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
2024-12-21 18:22:46
(1 year ago)
Attempted brute force login to web vpn
Hacking
Brute-Force
2024-11-27 22:00:08
(1 year ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
2024-08-14 01:28:00
(2 years ago)
port scan and credential stuffing.
Port Scan
Brute-Force
🇺🇸
MrDD
2024-07-09 18:19:09
(2 years ago)
Brute Force on Cisco Web VPN
Brute-Force