🇪🇸
librebit
2026-07-09 01:08:53
(4 days ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-07-07 20:16:38
(5 days ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-07-05 01:46:22
(1 week ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-07-04 00:24:34
(1 week ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-06-30 23:25:27
(1 week ago)
Brute force
Brute-Force
🇩🇪
Viveronese
2026-06-16 02:58:42
(3 weeks ago)
HTTP vulnerability scanning
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 09:51:22
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 194.104.11.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 194.104.11.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 05:51:16.815508 2026] [security2:error] [pid 29167:tid 29167] [client 194.104.11.205:12803] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kletzer.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kletzer.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah_5FEryVD6oC4opBOKTwgAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-30 14:18:42
(1 month ago)
FPROCO WEBEXPLOIT 194.104.11.205 (194.104.11.205)
Web App Attack
2026-05-25 21:57:57
(1 month ago)
FPROCO WEBEXPLOIT 194.104.11.205 (194.104.11.205)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 11:53:53
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 194.104.11.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 194.104.11.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 07:53:47.104897 2026] [security2:error] [pid 10747:tid 10747] [client 194.104.11.205:53251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mikethehomehelper.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mikethehomehelper.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahQ4Sw53PwhucfksWI4LegAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-02 09:37:12
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 194.104.11.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 194.104.11.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 05:37:08.392135 2026] [security2:error] [pid 4532:tid 4532] [client 194.104.11.205:28637] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||habakkukent.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "habakkukent.com"] [uri "/"] [unique_id "afXFxNhPgzNcqHk4FHsCZgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-27 22:38:19
(2 months ago)
FPROCO WEBEXPLOIT 194.104.11.205 (194.104.11.205)
Web App Attack
2026-04-19 12:20:55
(2 months ago)
FPROCO WEBEXPLOIT 194.104.11.205 (194.104.11.205)
Web App Attack
🇺🇸
rsiddall
2026-04-17 00:25:59
(2 months ago)
194.104.11.205 - - [16/Apr/2026:20:25:53 -0400] "POST /xmlrpc.php HTTP/1.1" 301 242 "-" "Apache-Http ...
show more
194.104.11.205 - - [16/Apr/2026:20:25:53 -0400] "POST /xmlrpc.php HTTP/1.1" 301 242 "-" "Apache-HttpClient/4.5.13 (Java/11.0.30)"
194.104.11.205 - - [16/Apr/2026:20:25:59 -0400] "POST /xmlrpc.php HTTP/1.1" 301 242 "-" "Apache-HttpClient/4.5.13 (Java/11.0.30)"
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-04-13 05:23:11
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 194.104.11.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 194.104.11.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 01:23:04.994844 2026] [security2:error] [pid 607568:tid 607568] [client 194.104.11.205:29023] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||harintonmechanical.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "harintonmechanical.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adx9uKo33SUWZNcTuQeOpAAAACE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack