🇺🇸
TPI-Abuse
2026-11-10 13:47:33
UTC ·
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 179.214.126.154 (b3d67e9a.virtua.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:47:26.282781 2026] [security2:error] [pid 4755:tid 4755] [client 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 179.214.126.154 (b3d67e9a.virtua.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:47:26.282781 2026] [security2:error] [pid 4755:tid 4755] [client 179.214.126.154:8662] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||georgesmarina.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "georgesmarina.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "avMgboOsqFVNEeQb-Q0SSgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
pixelmemory.us
2026-11-10 02:28:03
UTC ·
(13 hours ago)
2026-11-10T02:26:30 179.214.126.154 GET /Photos/SF%20Bay%20Photo/Jan%2020%202003/raw/P1201652.JPG Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36
...
Bad Web Bot
2026-11-06 14:15:04
UTC ·
(4 days ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Blocked by User-Agent Filter (Bad Bot Pattern: Windows NT 5.0): Mozilla/5.0 (Windows; U; Windows NT 5.0) AppleWebKit/531.23.6 (KHTML, like Gecko) Version/4.1 Safari/531.23.6 | UA: Mozilla/5.0 (Windows; U; Windows NT 5.0) AppleWebKit/531.23.6 (KHTML, like Gecko) Version/4.1 Safari/531.23.6 | (Magento Site)
show less
Hacking
Bad Web Bot
🇧🇷
ICS Labs
2026-10-27 18:06:51
UTC ·
(1 week ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-27 UTC.
Brute-Force
Exploited Host
🇫🇷
SpaceHost-Server
2026-10-26 23:17:20
UTC ·
(2 weeks ago)
Brute-Force
Web App Attack
🇩🇪
stinpriza
2026-10-26 14:48:25
UTC ·
(2 weeks ago)
WP Authentication attempt for unknown user
Brute-Force
Web App Attack
2026-10-21 21:23:43
UTC ·
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-03 17:02:38
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 179.214.126.154 (b3d67e9a.virtua.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 13:02:33.328011 2026] [security2:error] [pid 18590:tid 18590] [client ...
show more
(mod_security) mod_security (id:210350) triggered by 179.214.126.154 (b3d67e9a.virtua.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 13:02:33.328011 2026] [security2:error] [pid 18590:tid 18590] [client 179.214.126.154:14551] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||djemjaybeats.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "djemjaybeats.com"] [uri "/"] [unique_id "asE1KUzenpTl_JetnikhUgAAAAw"], referer: https://qualitybacklinksseo.website/dir/powerful-link-building-56300
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 02:44:41
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 179.214.126.154 (b3d67e9a.virtua.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 22:44:35.771042 2026] [security2:error] [pid 14983:tid 14983] [client ...
show more
(mod_security) mod_security (id:210350) triggered by 179.214.126.154 (b3d67e9a.virtua.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 22:44:35.771042 2026] [security2:error] [pid 14983:tid 14983] [client 179.214.126.154:9986] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cadimpressions.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cadimpressions.com"] [uri "/"] [unique_id "arx3k7M1OK4kK17o_33C7AAAAAU"], referer: https://websitebacklinks.shop/dir/trusted-seo-backlinks-32204
show less
Brute-Force
Bad Web Bot
Web App Attack
