🇺🇸
TPI-Abuse
2026-04-28 03:30:11
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 23:30:04.700676 2026] [security2:error] [pid 5227:tid 5237] [client 94.154.113.184:40787] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||howlerrock.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "howlerrock.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afApvJUUtt-i7m6Am_r0dgAAAUU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 23:44:00
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 19:43:55.791132 2026] [security2:error] [pid 32656:tid 32656] [client 94.154.113.184:12475] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||grasslakepizzatime.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grasslakepizzatime.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae_0uwvFPA_-2i7jC6wDjQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 09:28:14
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 05:28:09.976540 2026] [security2:error] [pid 15620:tid 15620] [client 94.154.113.184:36613] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||farjam.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "farjam.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae8sKWIL8MxiqbsdH9Wh7wAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
georgengelmann
2026-04-26 13:10:26
(1 month ago)
Failed login attempt for amandamedison
Brute-Force
Web App Attack
🇩🇪
netclix.gr
2026-04-26 04:32:55
(1 month ago)
(bot_kill_mega) Aggressive Bot Blocked: Go-http-client 94.154.113.184 (US/United States/-): 1 in the ...
show more
(bot_kill_mega) Aggressive Bot Blocked: Go-http-client 94.154.113.184 (US/United States/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 94.154.113.184 - - [26/Apr/2026:07:32:34 +0300] "GET /wp-login.php HTTP/2.0" 200 2665 "-" "Go-http-client/2.0"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-04-24 13:49:36
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 09:49:28.271097 2026] [security2:error] [pid 25683:tid 25683] [client 94.154.113.184:21701] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tradersworldmarket.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tradersworldmarket.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aet06DZtIuN4sNB4M-TPDwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 09:53:39
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 05:53:36.093400 2026] [security2:error] [pid 26260:tid 26260] [client 94.154.113.184:31613] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||teamulrich.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "teamulrich.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aes9oMpVcC8QtTk24TC4ZwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 09:14:22
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 05:14:15.510083 2026] [security2:error] [pid 29960:tid 29960] [client 94.154.113.184:27731] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||talentstar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "talentstar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aes0ZzbxlQhr3pakdgk9mgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-23 20:15:48
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 94.154.113.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 16:15:45.037264 2026] [security2:error] [pid 13409:tid 13419] [client 94.154.113.184:58525] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rawhabitat.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rawhabitat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aep98RokCcC2ztWLmOJ0IAAAAMg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-01-05 00:52:19
(5 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇬🇧
SilverZippo
2025-04-04 08:01:30
(1 year ago)
Web App Attack
Web App Attack
🇨🇭
backslash
2025-03-23 20:42:12
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇨🇿
lp
2025-03-15 01:25:21
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.184
2025-03-15T01:12:42+01 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.184
2025-03-15T01:12:42+01:00 vpn Access-Reject 'baby' station: 94.154.113.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack