🇫🇷
RodGel
2026-06-02 17:06:06
(2 days ago)
Multiple 404 errors (Potential brute force attempt)
Web App Attack
2026-05-25 07:22:57
(1 week ago)
(apache-useragents) Failed apache-useragents trigger with match [Mozilla/5.0 (compatible; Dataprovid ...
show more
(apache-useragents) Failed apache-useragents trigger with match [Mozilla/5.0 (compatible; Dataprovider.com)] from 144.217.135.252 (NL/The Netherlands/crawl-144-217-135-252.dataproviderbot.com): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 144.217.135.252 - - [25/May/2026:09:22:38 +0200] "GET / HTTP/1.1" 301 525 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.135.252 - - [25/May/2026:09:22:38 +0200] "GET / HTTP/2.0" 200 115652 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.135.252 - - [25/May/2026:09:22:44 +0200] "GET /robots.txt HTTP/2.0" 200 129 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.135.252 - - [25/May/2026:09:22:45 +0200] "GET /sitemap.xml HTTP/2.0" 302 98 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.135.252 - - [25/May/2026:09:22:49 +0200] "GET /wp-sitemap.xml HTTP/2.0" 200 736 "https://www.1883-routin.nl/sitemap.xml" "Mozilla/5.0 (compatible; Dataprovider.com)"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-04-05 16:13:22
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 144.217.135.252 (crawl-144-217-135-252.dataprov ...
show more
(mod_security) mod_security (id:210730) triggered by 144.217.135.252 (crawl-144-217-135-252.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 12:13:13.677499 2026] [security2:error] [pid 28759:tid 28759] [client 144.217.135.252:43613] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.ipostsocialmedia.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ipostsocialmedia.com"] [uri "/[email protected] "] [unique_id "adKKGQI029JVlzKuS-ijSwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Shaik Sai Meera
2026-02-21 13:05:09
(3 months ago)
IM360 WAF: Hidden file access
Brute-Force
🇺🇸
TPI-Abuse
2025-12-20 10:56:46
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 144.217.135.252 (crawl-144-217-135-252.dataprov ...
show more
(mod_security) mod_security (id:210730) triggered by 144.217.135.252 (crawl-144-217-135-252.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 20 05:56:42.489405 2025] [security2:error] [pid 22812:tid 22812] [client 144.217.135.252:33821] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.raintechgutters.com|F|2"] [data ".raintechgutters.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.raintechgutters.com"] [uri "/local-gutter-services-orlando/www.raintechgutters.com"] [unique_id "aUaA6sPoDWEW6NXliLwjmQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-20 08:25:52
(5 months ago)
(mod_security) mod_security (id:243420) triggered by 144.217.135.252 (crawl-144-217-135-252.dataprov ...
show more
(mod_security) mod_security (id:243420) triggered by 144.217.135.252 (crawl-144-217-135-252.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 20 03:25:48.290123 2025] [security2:error] [pid 14328:tid 14328] [client 144.217.135.252:60053] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||www.gensou.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.gensou.net"] [uri "/contact.html"] [unique_id "aUZdjA5Hn5wk8c2t4cRsMQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-03 12:11:54
(8 months ago)
144.217.135.252 - sliver85.eu - [03/Oct/2025:14:11:52 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (comp ...
show more
144.217.135.252 - sliver85.eu - [03/Oct/2025:14:11:52 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.135.252 - sliver85.eu - [03/Oct/2025:14:11:53 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.135.252 - sliver85.eu - [03/Oct/2025:14:11:54 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (compatible; Dataprovider.com)"
...
show less
Brute-Force
Web App Attack
2025-09-26 14:03:37
(8 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇿🇦
Immersive
2025-08-17 00:50:36
(9 months ago)
Probing server for potential vulnerabilities
Hacking
Web App Attack
🇩🇪
webmaster67.fr
2025-07-03 15:04:32
(11 months ago)
Tentative bloquée par Fail2Ban sur webmaster67.fr (xmlrpc.php ou scan récurrent)
Brute-Force
2025-06-16 09:30:26
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-06-07 01:46:54
(11 months ago)
Excessive crawling/scraping
Hacking
Brute-Force
🇩🇪
SCHAPPY
2025-05-29 14:45:02
(1 year ago)
Brute-force attack to identify web exploits
Brute-Force
Web App Attack
2025-05-06 08:07:56
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇦
JuicyJ
2025-04-22 13:47:52
(1 year ago)
Excessive crawling/scraping
Web App Attack