🇸🇬
Cloudkul Cloudkul
2026-10-28 06:07:42
(1 day ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
🇺🇸
mw
2026-10-28 00:01:21
(2 days ago)
GET /wp-adminmaintwp-is.php HTTP/1.1
Web App Attack
🇳🇱
Site.eu
2026-10-27 22:34:05
(2 days ago)
Excessive 404/403 errors
Brute-Force
🇸🇪
vaia.cloud
2026-10-26 09:05:02
(3 days ago)
crowdsecurity/http-backdoors-attempts
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 08:05:26
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 04:05:20.480428 2026] [security2:error] [pid 6302:tid 6302] [client 47.245.135.193:57888] M ...
show more
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 04:05:20.480428 2026] [security2:error] [pid 6302:tid 6302] [client 47.245.135.193:57888] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bentonflybox.com|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bentonflybox.com"] [uri "/okok.cer"] [unique_id "at8JwFlovv452b_N6uOsAQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-10-26 04:29:05
(3 days ago)
cloudlinux2 fail2ban: 2026-10-26 05:24:17,762 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 185.177.72.100 - 2026-10-26 05:24:17cloudlinux2 fail2ban: 2026-10-26 05:24:17,882 fail2ban.filter [1596]: INFO [recidive] Found ...
show more
cloudlinux2 fail2ban: 2026-10-26 05:24:17,762 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 185.177.72.100 - 2026-10-26 05:24:17cloudlinux2 fail2ban: 2026-10-26 05:24:17,882 fail2ban.filter [1596]: INFO [recidive] Found 185.177.72.100 - 2026-10-26 05:24:17cloudlinux2 fail2ban: 2026-10-26 05:24:16,985 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 185.177.72.100 - 2026-10-26 05:24:16cloudlinux2 fail2ban: 2026-10-26 05:24:17,701 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 185.177.72.100 - 2026-10-26 05:24:17cloudlinux2 fail2ban: 2026-10-26 05:24:17,876 fail2ban.actions [1596]: NOTICE [plesk-modsecurity] Ban 185.177.72.100cloudlinux2 fail2ban: 2026-10-26 05:24:37,828 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 185.177.72.100 - 2026-10-26 05:24:37cloudlinux2 fail2ban: 2026-10-26 05:24:37,911 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 185.177.72.100 - 2026-10-26 05:24:37cloudlinux2 fail2ban:
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-10-25 12:30:00
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 08:29:57.037375 2026] [security2:error] [pid 24509:tid 24509] [client 47.245.135.193:52222] ...
show more
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 08:29:57.037375 2026] [security2:error] [pid 24509:tid 24509] [client 47.245.135.193:52222] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bbc.my1611.com|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bbc.my1611.com"] [uri "/okok.cer"] [unique_id "at32Re6_RflwMIgZZuA3IwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 08:07:29
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 04:07:21.848455 2026] [security2:error] [pid 7259:tid 7259] [client 47.245.135.193:35008] M ...
show more
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 04:07:21.848455 2026] [security2:error] [pid 7259:tid 7259] [client 47.245.135.193:35008] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||balivisaservice.com|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "balivisaservice.com"] [uri "/okok.cer"] [unique_id "at24uXs0Cx38Vk_E3FNPjQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
antlac1
2026-10-25 03:40:42
(4 days ago)
crowdsecurity/http-wordpress-scan
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-10-24 07:42:54
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 22:32:56
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:32:50.880658 2026] [security2:error] [pid 28418:tid 28418] [client 47.245.135.193:47306] ...
show more
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:32:50.880658 2026] [security2:error] [pid 28418:tid 28418] [client 47.245.135.193:47306] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||akramansari.com|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "akramansari.com"] [uri "/okok.cer"] [unique_id "atfsEjsBL65g1Y4X1b0NUAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 10:05:46
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:05:39.122872 2026] [security2:error] [pid 11454:tid 11454] [client 47.245.135.193:49000] ...
show more
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:05:39.122872 2026] [security2:error] [pid 11454:tid 11454] [client 47.245.135.193:49000] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||agrisea.net|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agrisea.net"] [uri "/okok.cer"] [unique_id "atSZ84Xf-wRWKxZ-a51WAgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 01:35:55
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:35:49.139956 2026] [security2:error] [pid 23140:tid 23140] [client 47.245.135.193:49452] ...
show more
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:35:49.139956 2026] [security2:error] [pid 23140:tid 23140] [client 47.245.135.193:49452] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||affourtit-bowmaker.com|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "affourtit-bowmaker.com"] [uri "/okok.cer"] [unique_id "atQidQNjtu9w8X1B7zsRpQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 22:58:16
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 18:58:08.115055 2026] [security2:error] [pid 31718:tid 31718] [client 47.245.135.193:33114] ...
show more
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 18:58:08.115055 2026] [security2:error] [pid 31718:tid 31718] [client 47.245.135.193:33114] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||adj-tech.net|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "adj-tech.net"] [uri "/okok.cer"] [unique_id "atP9gAepf7jH9YziIIjk5QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 21:48:53
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 17:48:42.477060 2026] [security2:error] [pid 5918:tid 5918] [client 47.245.135.193:42874] M ...
show more
(mod_security) mod_security (id:210730) triggered by 47.245.135.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 17:48:42.477060 2026] [security2:error] [pid 5918:tid 5918] [client 47.245.135.193:42874] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||adoniahenterprises.com|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "adoniahenterprises.com"] [uri "/okok.cer"] [unique_id "atPtOsnsAAIT1wn9EZ1c5QAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
