🇫🇷
dynamix
2026-10-18 16:29:24
(1 day ago)
Multiple WAF Violations
Web App Attack
🇩🇪
FeG Deutschland
2026-10-18 13:23:37
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 09:30:00
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 162.158.111.71 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.111.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 05:29:54.531498 2026] [security2:error] [pid 14175:tid 14175] [client 162.158.111.71:9445] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||whaletailpuckerbutt.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "whaletailpuckerbutt.com"] [uri "/rezerv.sql"] [unique_id "atSRksSAUbS2yhBcsx9jmQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 06:41:05
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 162.158.111.71 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.111.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:41:01.400751 2026] [security2:error] [pid 3262:tid 3262] [client 162.158.111.71:9408] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||raritymountainadventures.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "raritymountainadventures.com"] [uri "/admin/config.php.bak"] [unique_id "atRp_WSqSjLPdaX4eTP5kAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-18 05:18:53
(2 days ago)
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.111.71 - - [18/Oct/2026:07:18:38 +0200] "GET /db.sql HTTP/1.1" 301 551 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇸🇬
anotherwatcher
2026-10-18 00:49:44
(2 days ago)
bad bot
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-14 04:57:18
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 162.158.111.71 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.111.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 00:57:10.403734 2026] [security2:error] [pid 15890:tid 15890] [client 162.158.111.71:12573] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||namefinder.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "namefinder.com"] [uri "/backup.sql"] [unique_id "as8Lpp0lrCdpTyKShxqeEQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 23:40:18
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 162.158.111.71 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.111.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:39:59.179875 2026] [security2:error] [pid 27873:tid 27873] [client 162.158.111.71:13732] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||register-yacht-malta.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "register-yacht-malta.com"] [uri "/db.sql"] [unique_id "as7BT1qJ2WwfD6X03j22wQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-11 07:50:59
(1 week ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-05 13:33:21
(2 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 09:00:54
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.111.71 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.111.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 05:00:49.266231 2026] [security2:error] [pid 15950:tid 15950] [client 162.158.111.71:11331] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3dworld-wide.com"] [uri "/.git/config"] [unique_id "arY4Qby8Vhz28zrY7zm-6AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-21 09:50:15
(1 month ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Web App Attack
Hacking
SQL Injection
2026-07-24 11:47:04
(2 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇷🇺
DZBOT
2026-06-09 13:44:33
(4 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
mnsf
2026-06-02 18:05:11
(4 months ago)
Abuse Detected (1)
Brute-Force
Web App Attack
