๐ฉ๐ช
IVski.com
2026-10-14 00:52:59
(11 hours ago)
IVski WAF | Sensitive file probe detected - looking for config, backups or credentials
Hacking
Brute-Force
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-13 22:20:16
(13 hours ago)
Brute-Force
Web App Attack
๐ฉ๐ช
edgeshield
2026-10-13 09:37:16
(1 day ago)
Automated web request flooding / DDoS (EdgeShield WAF).
DDoS Attack
๐ง๐ช
taivas.nl
2026-10-13 04:32:43
(1 day ago)
Many_bad_calls
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 03:21:21
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 35.79.60.160 (ec2-35-79-60-160.ap-northeast-1.c ...
show more
(mod_security) mod_security (id:225170) triggered by 35.79.60.160 (ec2-35-79-60-160.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 23:21:15.616350 2026] [security2:error] [pid 19403:tid 19426] [client 35.79.60.160:57854] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||chelseyrae.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chelseyrae.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as2jq15SJI9lw8s7qvq5cAAAAFU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
LRob
2026-10-13 03:15:48
(1 day ago)
Web exploit attempt | method: GET | path: /wp-json/wp/v2/users | ua: Mozilla/5.0 (Windows NT 10.0; W ...
show more
Web exploit attempt | method: GET | path: /wp-json/wp/v2/users | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐บ๐ธ
heyzg
2026-10-13 01:47:13
(1 day ago)
HTTP Web Scanning (observed): 3 HTTP, 4.0m
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 01:39:07
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 35.79.60.160 (ec2-35-79-60-160.ap-northeast-1.c ...
show more
(mod_security) mod_security (id:225170) triggered by 35.79.60.160 (ec2-35-79-60-160.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 21:39:02.527863 2026] [security2:error] [pid 13840:tid 13849] [client 35.79.60.160:33188] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||asetiadi.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "asetiadi.net"] [uri "/wp-json/wp/v2/users"] [unique_id "as2LttmBhBOesqIB1gZ03gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 00:27:36
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 35.79.60.160 (ec2-35-79-60-160.ap-northeast-1.c ...
show more
(mod_security) mod_security (id:225170) triggered by 35.79.60.160 (ec2-35-79-60-160.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 20:27:29.596111 2026] [security2:error] [pid 17992:tid 17992] [client 35.79.60.160:42936] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||otraes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "otraes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as168T4Fiq3rZEBGuS6WBwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
CollideTech
2026-10-13 00:04:10
(1 day ago)
probing for vulnerabilities
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 22:57:08
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 35.79.60.160 (ec2-35-79-60-160.ap-northeast-1.c ...
show more
(mod_security) mod_security (id:225170) triggered by 35.79.60.160 (ec2-35-79-60-160.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 18:57:04.498340 2026] [security2:error] [pid 15429:tid 15429] [client 35.79.60.160:41794] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||drgtek.com.smogsandiego.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drgtek.com.smogsandiego.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as1lwOKAV_9-Z5UEA47DUgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-12 22:19:27
(1 day ago)
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-10-12 22:04:03
(1 day ago)
6.991 requests to many distinct domains in 1 hour (1w6d22h)
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-12 21:40:53
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 35.79.60.160 (ec2-35-79-60-160.ap-northeast-1.c ...
show more
(mod_security) mod_security (id:225170) triggered by 35.79.60.160 (ec2-35-79-60-160.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 17:40:47.665931 2026] [security2:error] [pid 8366:tid 8366] [client 35.79.60.160:56796] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mkdesignndetailing.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mkdesignndetailing.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as1T3_EZFANHILCjm6SClAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 20:45:14
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 35.79.60.160 (ec2-35-79-60-160.ap-northeast-1.c ...
show more
(mod_security) mod_security (id:225170) triggered by 35.79.60.160 (ec2-35-79-60-160.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 16:45:08.803297 2026] [security2:error] [pid 30782:tid 30852] [client 35.79.60.160:58454] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ethicmark.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ethicmark.org"] [uri "/wp-json/wp/v2/users"] [unique_id "as1G1EBTYbsLtr_B_e5j0wAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack