🇺🇸
TPI-Abuse
2026-09-18 02:53:23
(6 hours ago)
(mod_security) mod_security (id:210730) triggered by 136.112.172.161 (161.172.112.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210730) triggered by 136.112.172.161 (161.172.112.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 22:53:18.272942 2026] [security2:error] [pid 23422:tid 23422] [client 136.112.172.161:58828] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gamepart.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "aqynnvXE9mnX4is9qqTqQAAAAAE"], referer: http://gamepart.com/home/tancedi1/gamepart.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
SkyDancer
2026-09-18 02:25:31
(7 hours ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH
🇫🇷
bigorre.org
2026-09-17 15:19:42
(18 hours ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇬🇷
setupgr
2026-09-17 07:43:50
(1 day ago)
(mod_security) mod_security (id:11000011) triggered by 136.112.172.161 (US/United States/Iowa/Counci ...
show more
(mod_security) mod_security (id:11000011) triggered by 136.112.172.161 (US/United States/Iowa/Council Bluffs/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Sep 17 10:43:47.717158 2026] [security2:error] [pid 151048:tid 151069] [remote 136.112.172.161:58220] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 161.172.112.136.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "setworldup.com"] [uri "/sitemap.rss"] [unique_id "aquaM1F_OtpL9nCyxqnUOgAASxM"]
show less
Port Scan
🇫🇷
Stylottica
2026-09-17 04:21:21
(1 day ago)
PrestaShop Security Module: nested/encoded redirect parameter abuse on "back" (occurrences=3)
Web App Attack
2026-09-16 11:40:07
(1 day ago)
Web application attack detected.
Web App Attack
🇫🇷
bigorre.org
2026-09-16 06:36:44
(2 days ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇵🇱
Budyn
2026-09-15 17:06:45
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.definitelynotahoneypot.top | URI: /backup.sql | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; KeenableBot/1.0; +https://keenable.ai/) | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇷
conseilgouz
2026-09-14 19:32:59
(3 days ago)
loe-88 : Bloc AI bots=>/forum/up-forum/468-petit-souci-daffichage-caractere-supplementaire-et-saut-d ...
show more
loe-88 : Bloc AI bots=>/forum/up-forum/468-petit-souci-daffichage-caractere-supplementaire-et-saut-de-ligne(.ai)
show less
Hacking
🇩🇪
jbcrn
2026-09-14 16:38:15
(3 days ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: gen ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: generated-url. Requested honeypot path: /deflagration.latherin. User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; KeenableBot/1.0; +https://keenable.ai/)
show less
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2026-09-14 15:01:53
(3 days ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇨🇭
backslash
2026-09-14 13:42:00
(3 days ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇪🇸
el-brujo
2026-09-14 12:15:39
(3 days ago)
14/Sep/2026:14:15:39.356827 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
14/Sep/2026:14:15:39.356827 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 136.112.172.161] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".Com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "papyre.elhacker.info"] [uri "/T/Torbe/Putalocura
...
show less
Hacking
Web App Attack