🇺🇸
kosada.com
2026-08-24 18:47:58
(3 days ago)
Web password guessing
Brute-Force
🇬🇧
gigatech
2026-08-24 18:20:05
(3 days ago)
Webserver Probing
Web App Attack
🇬🇧
Mendip_Defender
2026-08-23 15:30:10
(4 days ago)
194.104.11.102 - - [23/Aug/2026:16:30:10 +0100] "GET /wp-admin.php HTTP/1.1" 404 237 "https://www.go ...
show more
194.104.11.102 - - [23/Aug/2026:16:30:10 +0100] "GET /wp-admin.php HTTP/1.1" 404 237 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
194.104.11.102 - - [23/Aug/2026:16:30:12 +0100] "GET /wp-json/wp/v2/users HTTP/1.1" 403 1226 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
194.104.11.102 - - [23/Aug/2026:16:30:18 +0100] "GET /wp-admin.php HTTP/1.1" 404 237 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Hacking
Web App Attack
🇺🇸
kosada.com
2026-08-11 14:52:44
(2 weeks ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-08-04 23:20:59
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 194.104.11.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 194.104.11.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 19:20:55.149684 2026] [security2:error] [pid 1441891:tid 1441891] [client 194.104.11.102:24361] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stewarttaylor.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stewarttaylor.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anJz16P3j4AT29QuJZtefgAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-02 21:06:35
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 194.104.11.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 194.104.11.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 17:06:31.370727 2026] [security2:error] [pid 2603698:tid 2603698] [client 194.104.11.102:37265] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||poulsoncustomhomes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "poulsoncustomhomes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "am-xV8WaoSBtkgbrWli3tAAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 05:34:54
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 194.104.11.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 194.104.11.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 01:34:46.873962 2026] [security2:error] [pid 836114:tid 836134] [client 194.104.11.102:16257] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sallykimmel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sallykimmel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amridrrtRMEPo4WhDC1rcwAAAJE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
anycast_ac
2026-07-15 22:03:59
(1 month ago)
[DDoS Attacker] This IP was attacking website anycast.ac and sent 48 requests on port 443
DDoS Attack
Web App Attack
🇦🇺
screwlooseit.com.au
2026-07-10 05:34:07
(1 month ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
RU/Russia/-
Web App Attack
🇫🇷
Tilellit.PRO
2026-07-05 04:20:31
(1 month ago)
WP Armour Plugin detection
Web Spam
Brute-Force
🇫🇷
Tilellit.PRO
2026-06-28 08:57:41
(1 month ago)
Fail2Ban banned 194.104.11.102 for security violations in jail wp-armour. Log: 2026/06/28 08:57:41 [ ...
show more
Fail2Ban banned 194.104.11.102 for security violations in jail wp-armour. Log: 2026/06/28 08:57:41 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 194.104.11.102 | Target: wplogin" , client: 194.104.11.102, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-27 19:58:36
(1 month ago)
Fail2Ban banned 194.104.11.102 for security violations in jail wp-armour. Log: 2026/06/27 19:58:35 [ ...
show more
Fail2Ban banned 194.104.11.102 for security violations in jail wp-armour. Log: 2026/06/27 19:58:35 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 194.104.11.102 | Target: wplogin" , client: 194.104.11.102, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-27 05:41:53
(2 months ago)
Fail2Ban banned 194.104.11.102 for security violations in jail wp-armour. Log: 2026/06/27 05:41:53 [ ...
show more
Fail2Ban banned 194.104.11.102 for security violations in jail wp-armour. Log: 2026/06/27 05:41:53 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 194.104.11.102 | Target: wplogin" , client: 194.104.11.102, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-06-24 05:25:43
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 194.104.11.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 194.104.11.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 01:25:37.315203 2026] [security2:error] [pid 11025:tid 11025] [client 194.104.11.102:17435] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||synergystudios.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "synergystudios.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajtqUYa6-gW1SKQx5GWYRAAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 21:50:19
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 194.104.11.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 194.104.11.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 17:50:15.078848 2026] [security2:error] [pid 31099:tid 31099] [client 194.104.11.102:56953] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||donnysimonton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "donnysimonton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aincF0wXH8EoRrdBqm8c0QAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack