🇩🇪
4server
2026-08-18 14:51:28
(5 days ago)
[TueAug1816:51:24.2414352026][security2:error][pid1182631:tid1182705][client83.142.55.115:0]ModSecur ...
show more
[TueAug1816:51:24.2414352026][security2:error][pid1182631:tid1182705][client83.142.55.115:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"aoRxbE5BKOE9NVvCmcKIRgAAAI0\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 16:26:52
(2 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-05-29 23:56:05
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 83.142.55.115 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 83.142.55.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 19:56:01.958882 2026] [security2:error] [pid 22918:tid 22918] [client 83.142.55.115:23883] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sahinozalit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sahinozalit.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahonkc9cyVkN2DKuBPLTeQAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-05-29 06:36:27
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 11:23:50
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 83.142.55.115 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 83.142.55.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 07:23:44.982278 2026] [security2:error] [pid 27794:tid 27794] [client 83.142.55.115:22547] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dietzengineers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dietzengineers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af8ZQFxFI9fpDzpLAjL3XgAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
Cognisant-Security
2026-04-09 08:35:00
(4 months ago)
Attempts to login WordPress with invalid admin credentials
Web App Attack
Hacking
🇺🇸
oralunal
2026-04-02 10:54:09
(4 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-02-07 17:12:28
(6 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-01-23 04:28:35
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 83.142.55.115 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 83.142.55.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 23:28:31.646740 2026] [security2:error] [pid 16856:tid 16856] [client 83.142.55.115:34871] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||globalweb123.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "globalweb123.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXL472M9ZmJ1onjUB7MIVQAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-17 12:53:56
(8 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-12-16 02:26:59
(8 months ago)
2025-12-16T04:26:59.300406+02:00 zanati wp(www.sahpa.co.za)[977434]: Blocked authentication attempt ...
show more
2025-12-16T04:26:59.300406+02:00 zanati wp(www.sahpa.co.za)[977434]: Blocked authentication attempt for admin from 83.142.55.115
...
show less
Web App Attack
2025-12-15 07:56:11
(8 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇦
SSH-Admin
2025-12-01 02:33:03
(8 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇺🇸
nationaleventpros.com
2025-11-25 23:51:36
(8 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2025-11-15 18:04:35
(9 months ago)
(mod_security) mod_security (id:210350) triggered by 83.142.55.115 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.55.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 13:04:26.628020 2025] [security2:error] [pid 5270:tid 5270] [client 83.142.55.115:11367] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tomthomasplumbing.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tomthomasplumbing.com"] [uri "/"] [unique_id "aRjAqoSzYZBtXC0MyRqenQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack