๐บ๐ฆ
URAN Publishing Service
2026-10-18 07:37:21
(2 hours ago)
[18/Oct/2026:10:37:20 +0300] -- 162.158.111.157 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[18/Oct/2026:10:37:20 +0300] -- 162.158.111.157 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /edu.sql HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 01:52:36
(8 hours ago)
(mod_security) mod_security (id:210730) triggered by 162.158.111.157 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.111.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:52:26.925492 2026] [security2:error] [pid 10600:tid 10600] [client 162.158.111.157:12883] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||wholesaleglassjars.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wholesaleglassjars.com"] [uri "/database.sql"] [unique_id "atQmWmIr7k3Vs03vB3q_QgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-17 21:01:08
(13 hours ago)
(mod_security) mod_security (id:210730) triggered by 162.158.111.157 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.111.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 17:01:02.720072 2026] [security2:error] [pid 25716:tid 25716] [client 162.158.111.157:12885] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.threewillowsfarm.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.threewillowsfarm.com"] [uri "/db.sql"] [unique_id "atPiDihryg3n44FVYckd8AAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-17 10:16:03
(1 day ago)
Scanner hitting /wp-admin/install.php?step=1 on picsou.cloud (CLOUDFLARENET) โ aaguard
Brute-Force
Port Scan
Anonymous
2026-10-14 20:52:19
(3 days ago)
Blocked by firewall on hugin [8443/tcp] | Rule: UFW | SPT: 25005 | TTL: 57 | LEN: 60 | TOS: 0x00 โข R ...
show more
Blocked by firewall on hugin [8443/tcp] | Rule: UFW | SPT: 25005 | TTL: 57 | LEN: 60 | TOS: 0x00 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐ซ๐ท
dynamix
2026-10-07 23:32:35
(1 week ago)
Multiple WAF Violations
Web App Attack
๐ง๐ช
madeit
2026-10-01 11:31:12
(2 weeks ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-25 15:59:48
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.111.157 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.111.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 11:59:41.870490 2026] [security2:error] [pid 30801:tid 30801] [client 162.158.111.157:13703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karieva.com"] [uri "/.git/config"] [unique_id "araabcD-o8YddFZf9UDI7QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-09-18 06:36:34
(1 month ago)
Web App Attack
๐ท๐บ
DZBOT
2026-08-25 02:20:34
(1 month ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ง๐ช
madeit
2026-08-24 22:17:03
(1 month ago)
Web App Attack
๐ง๐ช
madeit
2026-08-12 16:42:42
(2 months ago)
Web App Attack
๐ท๐บ
DZBOT
2026-07-31 02:43:11
(2 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ท๐บ
DZBOT
2026-07-17 09:01:41
(3 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-16 04:05:06
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.111.157 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.111.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 00:05:01.525652 2026] [security2:error] [pid 9170:tid 9170] [client 162.158.111.157:11738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miss-ma.com"] [uri "/.git/config"] [unique_id "ajDLbVdWgsPBw0zlQ923ZAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack