🇨🇭
Origon
2026-06-04 08:01:37
(2 weeks ago)
http-probing - IP: 102.129.235.48 - time="2026-06-04T10:01:36+02:00" level=info msg="(555f66b4f6a74 ...
show more
http-probing - IP: 102.129.235.48 - time="2026-06-04T10:01:36+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 102.129.235.48 (US/174) : 4h ban on Ip 102.129.235.48" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 07:31:41
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 102.129.235.48 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.235.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 03:31:33.777371 2026] [security2:error] [pid 29013:tid 29013] [client 102.129.235.48:56349] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jellisonrepair.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jellisonrepair.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aiEp1ddIlMACUMIv0CJvCgAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
KiekerJan
2026-06-04 07:28:39
(2 weeks ago)
102.129.235.48 - - [04/Jun/2026:09:28:38 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 40 ...
show more
102.129.235.48 - - [04/Jun/2026:09:28:38 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
102.129.235.48 - - [04/Jun/2026:09:28:38 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
🇩🇪
BlueWire Hosting
2026-06-04 07:26:35
(2 weeks ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
🇨🇭
zynex
2026-06-04 06:22:47
(2 weeks ago)
URL Probing: /wp-includes/id3/license.txt/wordpress/wp-includes/wlwmanifest.xml
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 05:23:14
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 102.129.235.48 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.235.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 01:23:07.885760 2026] [security2:error] [pid 3217:tid 3217] [client 102.129.235.48:51041] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jeffmasonmusic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jeffmasonmusic.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aiELu42t3b6Ej7G-AREt9AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 00:25:33
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 102.129.235.48 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.235.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 20:25:25.251227 2026] [security2:error] [pid 30476:tid 30476] [client 102.129.235.48:57446] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jeanniemorrislaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jeanniemorrislaw.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aiDF9SVJ96h78Nu6sczVvgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jcbriar
2026-06-03 15:38:04
(2 weeks ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇪🇨
icp77
2026-06-03 15:02:00
(2 weeks ago)
Abuse DDoS
DDoS Attack
Port Scan
Brute-Force
Exploited Host
Web App Attack
SSH
FTP Brute-Force
Hacking
SQL Injection
🇩🇪
MaxMeier
2026-06-03 12:46:46
(2 weeks ago)
102.129.235.48 - - [03/Jun/2026:14:45:44 +0200] "" 400 0 "-" "-"
102.129.235.48 - - [03/Jun/2026:14: ...
show more
102.129.235.48 - - [03/Jun/2026:14:45:44 +0200] "" 400 0 "-" "-"
102.129.235.48 - - [03/Jun/2026:14:45:47 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
102.129.235.48 - - [03/Jun/2026:14:45:48 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
102.129.235.48 - - [03/Jun/2026:14:45:48 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
102.129.235.48 - - [03/Jun/2026:14:45:51 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
102.129.235.48 - - [03/Jun/2026:14:45:53 +0200] "GET //
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 11:12:14
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 102.129.235.48 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.235.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 07:12:08.413131 2026] [security2:error] [pid 11429:tid 11429] [client 102.129.235.48:33316] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jbernsteinpc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jbernsteinpc.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aiAMCLjQaDX4ZMrPW8RvcQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 09:00:08
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 102.129.235.48 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.235.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 05:00:01.004938 2026] [security2:error] [pid 4920:tid 4920] [client 102.129.235.48:53989] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jazziiafoundation.jazziientertainment.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jazziiafoundation.jazziientertainment.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ah_tEeBggVW8c1HqgfT1PQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-06-03 08:40:34
(2 weeks ago)
Unauthorized access to webpage admin
Web App Attack
🇩🇪
jasperedv.de
2026-06-03 04:57:57
(2 weeks ago)
Apache Login - Brutforcing
Web App Attack
Brute-Force
🇩🇪
Ba-Yu
2026-06-03 03:55:30
(2 weeks ago)
WP-xmlrpc exploit
Web Spam
Blog Spam
Hacking
Exploited Host
Web App Attack