🇺🇸
TPI-Abuse
2026-06-14 09:17:51
(8 hours ago)
(mod_security) mod_security (id:225170) triggered by 5.181.170.96 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 5.181.170.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 05:17:36.620350 2026] [security2:error] [pid 7775:tid 7775] [client 5.181.170.96:36101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mtalame.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mtalame.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai5xsExB1upv5Nh988qycwAAABs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 02:29:28
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 5.181.170.96 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 5.181.170.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 22:29:12.634487 2026] [security2:error] [pid 29040:tid 29068] [client 5.181.170.96:53253] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gotogps.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gotogps.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag5t-KbeEZBxO5azR9E3JQAAAJM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 21:08:40
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 5.181.170.96 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 5.181.170.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 17:08:24.957008 2026] [security2:error] [pid 20509:tid 20509] [client 5.181.170.96:24921] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.accpp.link|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.accpp.link"] [uri "/index.php"] [unique_id "agToSMGQfS9kR3CXL4fQ-gAAABI"], referer: http://www.accpp.link/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 09:31:49
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 5.181.170.96 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 5.181.170.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 05:31:35.927385 2026] [security2:error] [pid 11146:tid 11146] [client 5.181.170.96:37307] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||goodpage.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "goodpage.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agRE9z1Zjyf0gaStt0T0KQAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-05-09 22:39:10
(1 month ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇨🇭
backslash
2026-04-09 11:42:02
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇮🇹
VHosting
2026-03-26 19:57:55
(2 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇺🇸
TPI-Abuse
2025-10-16 01:30:41
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 5.181.170.96 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 5.181.170.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 21:30:24.726667 2025] [security2:error] [pid 6250:tid 6250] [client 5.181.170.96:33279] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gemco-mfg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gemco-mfg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPBKsIDJuD7CvsUJ5hyEgQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2025-08-11 10:52:14
(10 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 5.181.170.96
2025-08-11T11:32:06+02:0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 5.181.170.96
2025-08-11T11:32:06+02:00 vpn Access-Reject 'documentos' station: 5.181.170.96 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇪🇸
masterguru
2025-06-17 02:18:23
(11 months ago)
HTTP header is restricted by policy (/content-encoding/). String match within "/accept-charset/ /con ...
show more
HTTP header is restricted by policy (/content-encoding/). String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_content-encoding. (920450-123)
show less
Bad Web Bot
🇨🇿
lp
2024-11-10 20:54:11
(1 year ago)
Unauthorized VPN login attempts: 4 attempts were recorded from 5.181.170.96
2024-11-10T08:10:20+01:0 ...
show more
Unauthorized VPN login attempts: 4 attempts were recorded from 5.181.170.96
2024-11-10T08:10:20+01:00 vpn Access-Reject 'questions' station: 5.181.170.96 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2024-11-10T08:33:30+01:00 vpn Access-Reject 'meeting' station: 5.181.170.96 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2024-11-10T09:38:12+01:00 vpn Access-Reject 'adult' station: 5.181.170.96 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2024-11-10T09:49:21+01:00 vpn Access-Reject 'forehead' station: 5.181.170.96 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
2024-10-24 16:07:12
(1 year ago)
botnet
DDoS Attack
🇺🇸
MrDD
2024-07-09 18:19:09
(1 year ago)
Brute Force on Cisco Web VPN
Brute-Force
🇺🇸
TheMadBeaker
2024-04-18 19:48:06
(2 years ago)
Fail2Ban Ban Triggered
HTTP SQL Injection Attempt
Hacking
SQL Injection
🇵🇱
rafix
2023-11-03 06:46:14
(2 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot