๐บ๐ธ
mnsf
2026-06-23 00:06:48
(2 hours ago)
Too many Status 40X (16)
Brute-Force
Web App Attack
๐บ๐ธ
EvilTurkey
2026-06-22 16:58:07
(9 hours ago)
Web app attack against financial institution website.
Web App Attack
Hacking
๐จ๐ญ
backslash
2026-06-22 11:27:00
(15 hours ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-22 11:19:51
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.78.73.98 (98.73.78.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.78.73.98 (98.73.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 07:19:48.099152 2026] [security2:error] [pid 3857:tid 3857] [client 34.78.73.98:64858] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eaglejames.disio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eaglejames.disio.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajkaVDvySIKDk0FX9qlaOwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
Halux
2026-06-22 11:09:56
(15 hours ago)
34.78.73.98 Web Application Firewall multiple violations
Hacking
Web App Attack
๐ณ๐ฑ
Site.eu
2026-06-22 11:08:42
(15 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ง๐ช
cmbplf
2026-06-22 11:08:27
(15 hours ago)
272.477 requests in 3 hours (2mos3w2d)
Brute-Force
Bad Web Bot
๐ฉ๐ช
AetherFox
2026-06-22 11:04:03
(15 hours ago)
AetherFox VoidGuard detected: [Mon Jun 22 11:04:00.958112 2026] [authz_core:error] [pid 1704952:tid ...
show more
AetherFox VoidGuard detected: [Mon Jun 22 11:04:00.958112 2026] [authz_core:error] [pid 1704952:tid 1704988] [client 34.78.73.98:51419] AH01630: client denied by server configuration: proxy:https://[MASKED]/wp-includes/ID3/license.txt
[Mon Jun 22 11:04:01.548045 2026] [authz_core:error] [pid 1704952:tid 1704974] [client 34.78.73.98:51419] AH01630: client denied by server configuration: proxy:https://[MASKED]/feed/
[Mon Jun 22 11:04:02.345330 2026] [authz_core:error] [pid 1704952:tid 1705001] [client 34.78.73.98:51419] AH01630: client denied by server configuration: proxy:https://[MASKED]/xmlrpc.php
[Mon Jun 22 11:04:03.167780 2026] [authz_core:error] [pid 1704952:tid 1704979] [client 34.78.73.98:51419] AH01630: client denied by server configuration: proxy:https://[MASKED]/blog/wp-includes/wlwmanifest.xml
[Mon Jun 22 11:04:03.595196 2026] [authz_core:error] [pid 1704952:tid 1704980] [client 34.78.73.98:51419] AH01630: client denied by server configuration
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-06-22 11:00:49
(15 hours ago)
(xmlrpc) Apache: Failed xmlrpc access from 34.78.73.98 (BE/Belgium/98.73.78.34.bc.googleusercontent. ...
show more
(xmlrpc) Apache: Failed xmlrpc access from 34.78.73.98 (BE/Belgium/98.73.78.34.bc.googleusercontent.com): 10 in the last 3600 secs (0-201)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-22 10:51:34
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.78.73.98 (98.73.78.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.78.73.98 (98.73.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 06:51:29.199496 2026] [security2:error] [pid 16527:tid 16527] [client 34.78.73.98:57128] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dixiegeek.cosentient.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dixiegeek.cosentient.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajkTsQS3BHc__eBhbWRV_QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
polycoda
2026-06-22 10:46:40
(16 hours ago)
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based) - ๐ Directory Listings (Decay-Based) - โ Excess ...
show more
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based) - ๐ Directory Listings (Decay-Based) - โ Excessive 40X Errors (Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
abdubhai
2026-06-22 10:42:50
(16 hours ago)
34.78.73.98 - - [22/Jun/2026:15:
...
Brute-Force
๐ฎ๐ฉ
Burayot
2026-06-22 10:35:23
(16 hours ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.78.73.98 (BE/Belgium/98.73.78.34 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.78.73.98 (BE/Belgium/98.73.78.34.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
Anonymous
2026-06-22 10:35:09
(16 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
Anonymous
2026-06-22 10:35:03
(16 hours ago)
[redacted] 34.78.73.98 - - [22/Jun/2026:12:35:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Moz ...
show more
[redacted] 34.78.73.98 - - [22/Jun/2026:12:35:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.78.73.98 - - [22/Jun/2026:12:35:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.78.73.98 - - [22/Jun/2026:12:35:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.78.73.98 - - [22/Jun/2026:12:35:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.78.73.98 - - [22/Jun/2026:12:35:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.
...
show less
Hacking
Web App Attack