🇺🇸
TPI-Abuse
2026-11-06 12:11:08
UTC ·
(53 minutes ago)
(mod_security) mod_security (id:225170) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:11:02.190103 2026] [security2:error] [pid 8239:tid 8239] [client 192.141.94.52:51502] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:11:02.190103 2026] [security2:error] [pid 8239:tid 8239] [client 192.141.94.52:51502] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bikinitweets.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bikinitweets.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au3D1uWDvH6E0DtJyAyp1gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 13:35:03
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 08:34:54.776672 2026] [security2:error] [pid 12320:tid 12320] [client 192.141.94.52:36429] M ...
show more
(mod_security) mod_security (id:225170) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 08:34:54.776672 2026] [security2:error] [pid 12320:tid 12320] [client 192.141.94.52:36429] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stinsonbeachsurfandkayak.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stinsonbeachsurfandkayak.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aus0fr9wyiQRZq2f6Suh9AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇹
Malta
2026-11-01 08:41:25
UTC ·
(5 days ago)
192.141.94.52 - - [01/Nov/2026:09:41:25 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
🇩🇪
big-cloud.nl
2026-11-01 06:37:53
UTC ·
(5 days ago)
Try to access /xmlrpc.php
Web App Attack
🇨🇿
lp
2026-10-31 18:47:42
UTC ·
(5 days ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 192.141.94.52
2026-10-31T19:35:34+0100 vpn Access-Reject station: 192.141.94.52
Brute-Force
Web App Attack
🇨🇿
lp
2026-10-30 09:18:34
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 192.141.94.52
2026-10-30T10:08:23+0100 vpn Access-Reject station: 192.141.94.52
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 19:00:09
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:00:02.246078 2026] [security2:error] [pid 18210:tid 18210] [client 192.141.94.52:36498] M ...
show more
(mod_security) mod_security (id:210350) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:00:02.246078 2026] [security2:error] [pid 18210:tid 18210] [client 192.141.94.52:36498] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bsa1688.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bsa1688.com"] [uri "/"] [unique_id "auOXsunqqPDSQ4tjc6eyuAAAAAI"], referer: https://five.co.in/redirect.php?ref_host=garagecorp.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-10-24 12:05:21
UTC ·
(1 week ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇩🇪
Hazzard
2026-10-20 16:26:57
UTC ·
(2 weeks ago)
(wordpress) Failed wordpress login from 192.141.94.52 (AR/Argentina/San Juan/Villa Aberastain/-/[redacted]): (CF_ENABLE)
Brute-Force
🇩🇪
FeG Deutschland
2026-10-17 15:16:17
UTC ·
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 22:29:51
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:29:46.667733 2026] [security2:error] [pid 23300:tid 23300] [client 192.141.94.52:50031] M ...
show more
(mod_security) mod_security (id:225170) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:29:46.667733 2026] [security2:error] [pid 23300:tid 23300] [client 192.141.94.52:50031] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dorismitchell.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dorismitchell.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "atACWrJdhopQuoSbSbp6GAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 02:36:43
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 22:36:39.289729 2026] [security2:error] [pid 18841:tid 18841] [client 192.141.94.52:59852] M ...
show more
(mod_security) mod_security (id:225170) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 22:36:39.289729 2026] [security2:error] [pid 18841:tid 18841] [client 192.141.94.52:59852] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||helloauto.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "helloauto.net"] [uri "/wp-json/wp/v2/users"] [unique_id "as2ZN8XfJRUttTxxzPoJfwAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 21:57:04
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 17:56:56.704407 2026] [security2:error] [pid 16064:tid 16151] [client 192.141.94.52:44255] M ...
show more
(mod_security) mod_security (id:225170) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 17:56:56.704407 2026] [security2:error] [pid 16064:tid 16151] [client 192.141.94.52:44255] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbestcarting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbestcarting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as1XqEmXEJ2Qssn_CwI-3AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-12 05:31:04
UTC ·
(3 weeks ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 05:45:55
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 01:45:49.683620 2026] [security2:error] [pid 31620:tid 31703] [client 192.141.94.52:36559] M ...
show more
(mod_security) mod_security (id:225170) triggered by 192.141.94.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 01:45:49.683620 2026] [security2:error] [pid 31620:tid 31703] [client 192.141.94.52:36559] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||reghay.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "reghay.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ash_jQFbgKyfzOZ6Ddkw_AAAAhE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
