This IP address has been reported a total of
11
times from
11 distinct
sources.
94.100.52.128 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
IM360 WAF: WordPress wp2shell REST batch endpoint before 7.0.2 or 6.9.5 (CVE-2026-63030) MV:/batch/v ...
show moreIM360 WAF: WordPress wp2shell REST batch endpoint before 7.0.2 or 6.9.5 (CVE-2026-63030) MV:/batch/v1
show less
(mod_security) mod_security (id:225170) triggered by 94.100.52.128 (-): 1 in the last 300 secs; Port ...
show more(mod_security) mod_security (id:225170) triggered by 94.100.52.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 04:23:53.244738 2026] [security2:error] [pid 3089:tid 3089] [client 94.100.52.128:51026] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||renjunews.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "renjunews.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alyJmV7slL9X_GDPqRqV0AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-19T08:38:53.465620+02:00 polaris wp(sahpa.co.za)[66369]: Authentication attempt for unknown ...
show more2026-07-19T08:38:53.465620+02:00 polaris wp(sahpa.co.za)[66369]: Authentication attempt for unknown user david.pueray from 94.100.52.128
...
show less