🇩🇪
pltcldvlpr
2026-06-05 11:06:46
(2 days ago)
Bogus Useragent: 104.36.177.74 - - [05/Jun/2026:13:06:45 +0200] "GET /protocol?id=nw_18_90 HTTP/1.1" ...
show more
Bogus Useragent: 104.36.177.74 - - [05/Jun/2026:13:06:45 +0200] "GET /protocol?id=nw_18_90 HTTP/1.1" 403 5 "-" "Opera/9.37.(X11; Linux i686; se-NO) Presto/2.9.188 Version/11.00" asn=46844 org="Sharktech" country=US
...
show less
Bad Web Bot
🇨🇭
ALPHANET
2026-03-23 05:00:02
(2 months ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇦🇺
MAGIC
2026-03-06 03:06:57
(3 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇬🇧
sc user
2026-02-16 12:10:00
(3 months ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show more
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Port Scan
Bad Web Bot
Web App Attack
🇹🇷
rtbh.com.tr
2026-02-13 20:11:35
(3 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇬🇧
sc user
2026-02-13 05:10:35
(3 months ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show more
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Port Scan
Bad Web Bot
Web App Attack
🇹🇷
rtbh.com.tr
2026-02-12 20:11:31
(3 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪
ghostwarriors
2026-02-11 23:20:23
(3 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 19:46:39
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 14:46:26.029988 2026] [security2:error] [pid 6925:tid 6925] [client 104.36.177.74:38372] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jamesclarklaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jamesclarklaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYzckh5HOaCx2EV9GnvK7gAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 18:49:52
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 13:49:35.572286 2026] [security2:error] [pid 7139:tid 7139] [client 104.36.177.74:54226] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||oceandrivebeach.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oceandrivebeach.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aYzPPzMAXqqErJaDjpXhmQAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 18:23:43
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 13:23:29.617162 2026] [security2:error] [pid 3704026:tid 3704032] [client 104.36.177.74:14002] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gotogps.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gotogps.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYzJIWb2GVmCeKpzsdeSlQAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 17:55:10
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 12:55:00.698905 2026] [security2:error] [pid 81326:tid 81326] [client 104.36.177.74:31132] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hartflicker.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hartflicker.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYzCdMQmAkHsUxrnu1Uv_wAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 17:33:02
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 12:32:51.052859 2026] [security2:error] [pid 17000:tid 17000] [client 104.36.177.74:59124] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||accinternational.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "accinternational.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aYy9Q_NRHPYzjeol6KX-qgAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 17:12:16
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 12:12:01.862130 2026] [security2:error] [pid 9391:tid 9395] [client 104.36.177.74:32230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||killyourattitude.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "killyourattitude.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYy4YQ-dA_-0v4IMAXcTHgAAAII"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 16:44:09
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 104.36.177.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 11:43:58.320598 2026] [security2:error] [pid 9905:tid 9905] [client 104.36.177.74:14002] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cgautomatizacion.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cgautomatizacion.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYyxzgYRq1scZ70g7JzsngAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack