🇷🇺
DZBOT
2026-08-28 16:28:27
(4 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 16:18:44
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.34.179.146 (146.179.34.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.34.179.146 (146.179.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 12:18:37.605396 2026] [security2:error] [pid 22611:tid 22611] [client 34.34.179.146:10175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||takemehomedogrescue.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "takemehomedogrescue.org"] [uri "/wp-json/wp/v2/users"] [unique_id "apG03QoBGjpx-OvJeddRCgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
omc
2026-08-28 16:01:53
(4 hours ago)
Botnet Layer 7 burst.
DDoS Attack
Bad Web Bot
🇩🇪
LRob
2026-08-28 15:10:03
(5 hours ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-json/wp/v2/users | 2026-08-28 15:10 UTC
show less
Hacking
Web App Attack
🇺🇸
1cyb3rpunk
2026-08-28 15:00:56
(5 hours ago)
Coordinated campaign CMP-1786835248-000: 160 IPs sharing an attack fingerprint (admin_panel_probe, a ...
show more
Coordinated campaign CMP-1786835248-000: 160 IPs sharing an attack fingerprint (admin_panel_probe, attacker_objective_inferred, aws_creds_file_probe, cms_version_probe, config_leak_probe, cors_abuse_probe). Observed on sectrace.org honeypot surface.
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 13:55:03
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.34.179.146 (146.179.34.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.34.179.146 (146.179.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:54:56.561844 2026] [security2:error] [pid 743676:tid 744276] [client 34.34.179.146:61985] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||managementlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "managementlaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apGTMOFKZIXkdblDzY0E6QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-08-28 13:45:16
(7 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
2026-08-28 13:40:27
(7 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-28 13:18:40
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.34.179.146 (146.179.34.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.34.179.146 (146.179.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:18:32.384477 2026] [security2:error] [pid 30047:tid 30047] [client 34.34.179.146:24376] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||clayrivers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "clayrivers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apGKqPxKybeRNz20Sw2nJwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-08-28 13:17:07
(7 hours ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-json/wp/v2/users | 2026-08-28 13:17 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 12:29:26
(8 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.34.179.146 (146.179.34.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.34.179.146 (146.179.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 08:29:20.178001 2026] [security2:error] [pid 10023:tid 10023] [client 34.34.179.146:35607] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||buanamegah.kairoslogammakmur.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "buanamegah.kairoslogammakmur.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apF_IFy_bonBZVWDrkNazQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
stinpriza
2026-08-28 12:19:53
(8 hours ago)
Web App Attack
Web App Attack
🇦🇺
FireGuard Server
2026-08-28 11:45:13
(9 hours ago)
Blocked by os-abuseipdb; 7 hits, proto=tcp, ports=443
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-08-28 11:16:24
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.34.179.146 (146.179.34.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.34.179.146 (146.179.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 07:16:18.044605 2026] [security2:error] [pid 18985:tid 18985] [client 34.34.179.146:33143] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mavikalem.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mavikalem.org"] [uri "/wp-json/wp/v2/users"] [unique_id "apFuAuFlWu_D5sHtfTvd7AAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 10:57:34
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.34.179.146 (146.179.34.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.34.179.146 (146.179.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 06:57:28.105113 2026] [security2:error] [pid 15440:tid 15576] [client 34.34.179.146:49533] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||peterhansenranch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "peterhansenranch.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apFpmDlh4F3a0yTSGbZf5wAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack