🇫🇮
YF
2026-06-22 04:00:44
(21 hours ago)
WordPress directory enumeration
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 19:29:48
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 144.217.135.140 (crawl-144-217-135-140.dataprov ...
show more
(mod_security) mod_security (id:210730) triggered by 144.217.135.140 (crawl-144-217-135-140.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 15:29:44.763974 2026] [security2:error] [pid 29805:tid 29805] [client 144.217.135.140:54051] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.raintechgutters.com|F|2"] [data ".raintechgutters.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.raintechgutters.com"] [uri "/local-gutter-services-orlando/www.raintechgutters.com"] [unique_id "ajGkKEq_ApxFW2UX1DLRLAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇰
SaltySoftworks
2026-06-10 07:08:10
(1 week ago)
User agent spoofing
Spoofing
🇩🇪
Viveronese
2026-06-07 02:28:40
(2 weeks ago)
HTTP vulnerability scanning
Web App Attack
🇺🇸
lavnet.net
2026-05-24 07:45:11
(4 weeks ago)
[Sun May 24 07:45:10.008361 2026] [authz_core:error] [pid 1509832:tid 1509937] [client 144.217.135.1 ...
show more
[Sun May 24 07:45:10.008361 2026] [authz_core:error] [pid 1509832:tid 1509937] [client 144.217.135.140:55649] AH01630: client denied by server configuration: /var/www/thejunkymonkey.com/web/index.php
[Sun May 24 07:45:10.008608 2026] [authz_core:error] [pid 1509832:tid 1509937] [client 144.217.135.140:55649] AH01630: client denied by server configuration: /var/www/thejunkymonkey.com/web/index.php
[Sun May 24 07:45:11.142134 2026] [authz_core:error] [pid 1509832:tid 1509926] [client 144.217.135.140:38395] AH01630: client denied by server configuration: /var/www/thejunkymonkey.com/web/index.php
...
show less
Brute-Force
🇪🇸
Michael McCarthy
2026-04-17 15:30:36
(2 months ago)
Web Spam
🇺🇸
TPI-Abuse
2026-04-08 11:08:19
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 144.217.135.140 (crawl-144-217-135-140.dataprov ...
show more
(mod_security) mod_security (id:210730) triggered by 144.217.135.140 (crawl-144-217-135-140.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 07:08:11.884790 2026] [security2:error] [pid 3881168:tid 3881168] [client 144.217.135.140:40559] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.elsmithpest.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.elsmithpest.com"] [uri "/[email protected] "] [unique_id "adY3G-5-hlHhfACFePT0LQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇹
SubnetShadowSpecter
2026-03-09 08:33:21
(3 months ago)
[Activity Alert] Abusive automated scraping detected in violation of crawl depth limits. IP blocked. ...
show more
[Activity Alert] Abusive automated scraping detected in violation of crawl depth limits. IP blocked. [User-Agent]: Mozilla/5.0 (compatible; Dataprovider.com). [OS]: unknown. [IP Address]: 144.217.135.140. [Date]: 2026-03-09 05:45:44 UTC.
show less
Bad Web Bot
Web App Attack
🇩🇪
Hary74656
2026-02-06 23:30:42
(4 months ago)
[Sat Feb 07 00:30:34.346732 2026] [core:info] [pid 826815:tid 826954] [client 144.217.135.140:54113] ...
show more
[Sat Feb 07 00:30:34.346732 2026] [core:info] [pid 826815:tid 826954] [client 144.217.135.140:54113] AH00128: File does not exist: /home/harald/www/ads.txt
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-28 15:44:18
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 144.217.135.140 (crawl-144-217-135-140.dataprov ...
show more
(mod_security) mod_security (id:210730) triggered by 144.217.135.140 (crawl-144-217-135-140.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 28 10:44:14.230519 2026] [security2:error] [pid 6023:tid 6023] [client 144.217.135.140:39825] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.cnprcertificationreviews.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.cnprcertificationreviews.org"] [uri "/facebook.com"] [unique_id "aXouznGMwmbvz6ByGusVFAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
giulio gorobey
2026-01-20 02:00:46
(5 months ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /.well-known/security.txt
Web App Attack
2025-11-13 03:32:31
(7 months ago)
[Thu Nov 13 04:32:29.365634 2025] [access_compat:error] [pid 1960782:tid 1960782] [client 144.217.13 ...
show more
[Thu Nov 13 04:32:29.365634 2025] [access_compat:error] [pid 1960782:tid 1960782] [client 144.217.135.140:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/llms.txt
[Thu Nov 13 04:32:29.726542 2025] [access_compat:error] [pid 1961446:tid 1961446] [client 144.217.135.140:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/humans.txt
[Thu Nov 13 04:32:30.075654 2025] [access_compat:error] [pid 1961796:tid 1961796] [client 144.217.135.140:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/ads.txt
[Thu Nov 13 04:32:30.222261 2025] [access_compat:error] [pid 1961446:tid 1961446] [client 144.217.135.140:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/security.txt
[Thu Nov 13 04:32:30.365670 2025] [access_compat:error] [pid 1961446:tid 1961446] [client 144.217.135.140:0] AH01797: client denied by server configuration: /var/www/wordpress/loretla
...
show less
Web Spam
Web App Attack
🇬🇧
AvonleaConsulting
2025-10-16 08:02:54
(8 months ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-08 11:51:07
(8 months ago)
(mod_security) mod_security (id:243420) triggered by 144.217.135.140 (crawl-144-217-135-140.dataprov ...
show more
(mod_security) mod_security (id:243420) triggered by 144.217.135.140 (crawl-144-217-135-140.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 08 07:51:02.984620 2025] [security2:error] [pid 7767:tid 7767] [client 144.217.135.140:34773] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||www.texasfurnitureinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.texasfurnitureinc.com"] [uri "/venta-de-camas"] [unique_id "aOZQJrvUVrHa-lkA-Y8TVgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-05 05:41:00
(8 months ago)
Unauthorized connection attempt
Brute-Force