🇪🇸
raiolanetworks.com
2026-09-30 22:37:56
(24 minutes ago)
Honeypot detection: web application attack. 2 events observed. Reported automatically from a honeypo ...
show more
Honeypot detection: web application attack. 2 events observed. Reported automatically from a honeypot sensor.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 11:06:06
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il) ...
show more
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 07:06:03.423555 2026] [security2:error] [pid 25625:tid 25652] [client 84.228.12.163:53178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||maroontribe.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "maroontribe.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arztG0TyFob6tqikbBPuCwAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
unhfree.net
2026-09-30 04:39:39
(18 hours ago)
Sep 29 22:24:54 canopus postfix/smtpd[2812710]: NOQUEUE: reject: RCPT from IGLD-84-228-12-163.inter. ...
show more
Sep 29 22:24:54 canopus postfix/smtpd[2812710]: NOQUEUE: reject: RCPT from IGLD-84-228-12-163.inter.net.il[84.228.12.163]: 554 5.7.1 Service unavailable; Client host [84.228.12.163] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/84.228.12.163 / Listed by PBL, see https://check.spamhaus.org/query/ip/84.228.12.163 / Listed by XBL, see https://check.spamhaus.org/query/ip/84.228.12.163; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<45.74.31.22>
Sep 30 02:27:35 canopus postfix/smtpd[2842111]: NOQUEUE: reject: RCPT from IGLD-84-228-12-163.inter.net.il[84.228.12.163]: 554 5.7.1 Service unavailable; Client host [84.228.12.163] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/84.228.12.163 / Listed by PBL, see https://check.spamhaus.org/query/ip/84.228.12.163 / Listed by XBL, see https://check.spamhaus.org/query/ip/84.228.12.163; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<45
...
show less
Brute-Force
Exploited Host
🇺🇸
TPI-Abuse
2026-09-30 04:21:25
(18 hours ago)
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il) ...
show more
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 00:21:18.826766 2026] [security2:error] [pid 19373:tid 19377] [client 84.228.12.163:49126] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sparkhypnotherapy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sparkhypnotherapy.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aryOPpqz7n9sPUFyL5ajDAAAAUE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 03:49:49
(19 hours ago)
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il) ...
show more
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 23:49:44.122203 2026] [security2:error] [pid 9294:tid 9294] [client 84.228.12.163:52172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||darkalleyproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "darkalleyproductions.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aryG2KxJMA2FSzRNYkUK_QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 03:34:19
(19 hours ago)
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il) ...
show more
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 23:34:11.721864 2026] [security2:error] [pid 17137:tid 17137] [client 84.228.12.163:39766] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bronislawsuchanek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bronislawsuchanek.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aryDM7iuxb83qS0P1Kh6twAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-30 03:30:02
(19 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 02:51:59
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il) ...
show more
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 22:51:55.549651 2026] [security2:error] [pid 978:tid 978] [client 84.228.12.163:34716] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||alsetsystems.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "alsetsystems.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arx5S_t68-XfzpbiMPQj9AAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 00:13:29
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il) ...
show more
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:13:23.758305 2026] [security2:error] [pid 18084:tid 18084] [client 84.228.12.163:56688] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sizefinder.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sizefinder.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arxUIyFZDobO5uTMU8SsggAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 21:29:43
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il) ...
show more
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 17:29:35.959453 2026] [security2:error] [pid 26747:tid 26747] [client 84.228.12.163:38980] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.iostation.kleens-uk.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.iostation.kleens-uk.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arwtv39WGoNRz26W7x3TGAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
saiva
2026-09-29 21:28:35
(1 day ago)
RdpGuard detected brute-force attempt on SMTP
Brute-Force
🇩🇪
FeG Deutschland
2026-09-29 19:56:55
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 18:47:43
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il) ...
show more
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 14:47:35.699121 2026] [security2:error] [pid 32350:tid 32350] [client 84.228.12.163:46588] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kritaka.ai|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kritaka.ai"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arwHx_8M1oRNtrv5zkXV3wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 17:05:48
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il) ...
show more
(mod_security) mod_security (id:225170) triggered by 84.228.12.163 (IGLD-84-228-12-163.inter.net.il): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 13:05:42.873069 2026] [security2:error] [pid 1015:tid 1015] [client 84.228.12.163:42782] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sneedvillefarmersmarket.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sneedvillefarmersmarket.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arvv5s6eXTKU_81rvaFRkAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
AbuseIPDBuser
2026-09-29 16:49:28
(1 day ago)
Unsolicited email received on a spamtrap address
Email Spam
