2026-11-12 18:26:41
UTC ·
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-12 17:46:50
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 191.34.81.144 (191.34.81.144.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:46:43.443089 2026] [security2:error] [pid 15844:tid 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 191.34.81.144 (191.34.81.144.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:46:43.443089 2026] [security2:error] [pid 15844:tid 15844] [client 191.34.81.144:36463] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cm-salon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cm-salon.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avX7g9AN9llOtgsIdhzUrgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 09:49:53
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 191.34.81.144 (191.34.81.144.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:49:45.609312 2026] [security2:error] [pid 31977:tid 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 191.34.81.144 (191.34.81.144.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:49:45.609312 2026] [security2:error] [pid 31977:tid 31977] [client 191.34.81.144:34380] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||b2c-llc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "b2c-llc.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avQ6Od7nlzKLAQiCNrSs2gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 11:01:28
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 191.34.81.144 (191.34.81.144.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:01:21.450937 2026] [security2:error] [pid 23090:tid 2 ...
show more
(mod_security) mod_security (id:225170) triggered by 191.34.81.144 (191.34.81.144.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:01:21.450937 2026] [security2:error] [pid 23090:tid 23090] [client 191.34.81.144:55052] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||creationorevolution.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "creationorevolution.net"] [uri "/wp-json/wp/v2/users"] [unique_id "avL5gU8gWt2ba_TYs-QSBgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:53:55
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 191.34.81.144 (191.34.81.144.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:53:48.619038 2026] [security2:error] [pid 3909:tid 39 ...
show more
(mod_security) mod_security (id:225170) triggered by 191.34.81.144 (191.34.81.144.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:53:48.619038 2026] [security2:error] [pid 3909:tid 3909] [client 191.34.81.144:39231] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||theseventhcongregationofladderdayvixens.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theseventhcongregationofladderdayvixens.org"] [uri "/wp-json/wp/v2/users"] [unique_id "avLbnEpWE9ZxYklIwcYKRAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
poundawebsiteltd
2026-11-10 05:53:26
UTC ·
(3 days ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 191.34.81.144 (BR/Brazil/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 191.34.81.144 (BR/Brazil/191.34.81.144.dynami ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 191.34.81.144 (BR/Brazil/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 191.34.81.144 (BR/Brazil/191.34.81.144.dynamic.adsl.gvt.net.br): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇲🇹
Malta
2026-11-09 00:06:13
UTC ·
(5 days ago)
191.34.81.144 - - [09/Nov/2026:01:06:12 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:148.0) Gecko/20100101 Firefox/148.0"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
🇩🇪
LRob
2026-11-08 21:32:42
UTC ·
(5 days ago)
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36
Web App Attack
Hacking
