🇩🇪
Ilop
2026-09-02 19:30:05
(25 minutes ago)
[hp-100] 19 unsolicited packets to honeypot ports 8000 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-08-30 00:03:47
(3 days ago)
[hp-100] 15 unsolicited packets to honeypot ports 8080 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-08-22 00:03:34
(1 week ago)
[hp-100] 15 unsolicited packets to honeypot ports 9000 (OCI DShield sensor)
Port Scan
🇳🇱
DonAtari
2026-08-08 07:32:13
(3 weeks ago)
DShield firewall scan - TCP to port 7547
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-07-31 10:32:50
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 06:32:45.665093 2026] [security2:error] [pid 504536:tid 504536] [client 89.19.35.73:46065] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||curtbeams.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "curtbeams.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amx5zRHfeVnDUFv7rYbzbAAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-31 08:22:30
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 04:22:26.979252 2026] [security2:error] [pid 2715799:tid 2715799] [client 89.19.35.73:60625] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||midnightscribe.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "midnightscribe.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amxbQufG8YxVfp6-h_HlmwAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-31 02:27:00
(1 month ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇭
backslash
2026-07-29 02:06:00
(1 month ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇨🇦
DRI
2026-07-25 23:47:28
(1 month ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 23:02:57
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 19:02:53.370230 2026] [security2:error] [pid 686348:tid 686348] [client 89.19.35.73:63871] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||genesis-one.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "genesis-one.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amVAnaqWsj-HADK-QZfYHgAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 23:55:47
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 19:55:43.073100 2026] [security2:error] [pid 3714531:tid 3714531] [client 89.19.35.73:23927] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||soundtrax.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "soundtrax.net"] [uri "/wp-json/wp/v2/users"] [unique_id "amKp_2yqyqrIscn_lVh33QAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 23:32:59
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 19:32:54.934353 2026] [security2:error] [pid 2978943:tid 2978943] [client 89.19.35.73:48623] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||silver-nm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "silver-nm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amKkpo1PJDE8svtxnFyiIAAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 21:03:02
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 17:02:56.966801 2026] [security2:error] [pid 1205361:tid 1205361] [client 89.19.35.73:17165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||afdfurniture.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "afdfurniture.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alqYgDeBzbs3pcwsT8IKUQAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-16 19:18:01
(1 month ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 12:53:30
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 08:53:24.526714 2026] [security2:error] [pid 30561:tid 30593] [client 89.19.35.73:38969] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jd-web-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jd-web-designs.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahwvRAUJVD-IOWgb6D7ASQAAABU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack