🇺🇸
francelink.fr
2026-11-10 10:56:25
UTC ·
(1 hour ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-10T10:55:01.000Z.
Web App Attack
🇪🇸
scaballe
2026-11-09 22:53:06
UTC ·
(13 hours ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 06:33:11
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.94.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:33:03.869501 2026] [security2:error] [pid 22251:tid 22256] [client 162.158.94.241:11738] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.94.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:33:03.869501 2026] [security2:error] [pid 22251:tid 22256] [client 162.158.94.241:11738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.thebiglies.com"] [uri "/wp-config.php.bak"] [unique_id "avAXn3eW4aKAxgqqza4R0wAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-01 10:44:47
UTC ·
(1 week ago)
Aggressive web scan
Web App Attack
🇫🇷
dynamix
2026-10-31 22:54:17
UTC ·
(1 week ago)
Multiple WAF Violations
Web App Attack
🇩🇪
www.mammazone.it
2026-10-30 05:38:26
UTC ·
(1 week ago)
[Fri Oct 30 06:38:24.646866 2026] [proxy_fcgi:error] [pid 2094545] [client 162.158.94.241:10363] AH01071: Got error 'Primary script unknown'
[Fri Oct 30 06:38:26.248555 2026] [proxy_fcgi:error] [pid 2094545] [client 162.158.94.241:10363] AH01071: Got ...
show more
[Fri Oct 30 06:38:24.646866 2026] [proxy_fcgi:error] [pid 2094545] [client 162.158.94.241:10363] AH01071: Got error 'Primary script unknown'
[Fri Oct 30 06:38:26.248555 2026] [proxy_fcgi:error] [pid 2094545] [client 162.158.94.241:10363] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
🇫🇷
dynamix
2026-10-24 19:19:43
UTC ·
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇩🇪
www.mammazone.it
2026-10-18 18:33:53
UTC ·
(3 weeks ago)
[Sun Oct 18 20:33:52.010138 2026] [proxy_fcgi:error] [pid 297382] [client 162.158.94.241:13573] AH01071: Got error 'Primary script unknown'
[Sun Oct 18 20:33:52.667261 2026] [proxy_fcgi:error] [pid 297382] [client 162.158.94.241:13573] AH01071: Got e ...
show more
[Sun Oct 18 20:33:52.010138 2026] [proxy_fcgi:error] [pid 297382] [client 162.158.94.241:13573] AH01071: Got error 'Primary script unknown'
[Sun Oct 18 20:33:52.667261 2026] [proxy_fcgi:error] [pid 297382] [client 162.158.94.241:13573] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
🇺🇸
TPI-Abuse
2026-10-18 13:52:35
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 162.158.94.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:52:29.663459 2026] [security2:error] [pid 22031:tid 22031] [client 162.158.94.241:11497] ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.94.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:52:29.663459 2026] [security2:error] [pid 22031:tid 22031] [client 162.158.94.241:11497] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.parkplacemotel.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.parkplacemotel.com"] [uri "/config.php.bak"] [unique_id "atTPHVN_Wp3kETrsjOPGBQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-18 10:49:46
UTC ·
(3 weeks ago)
[18/Oct/2026:13:49:45 +0300] -- 162.158.94.241 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /edu.zip HTTP/1.1
Bad Web Bot
Web App Attack
Anonymous
2026-10-18 10:08:02
UTC ·
(3 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 06:54:11
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 162.158.94.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:54:04.116680 2026] [security2:error] [pid 19187:tid 19187] [client 162.158.94.241:10574] ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.94.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:54:04.116680 2026] [security2:error] [pid 19187:tid 19187] [client 162.158.94.241:10574] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||good4sound.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "good4sound.com"] [uri "/database.sql"] [unique_id "atRtDA6lcoEEsxj0eMnPJwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
findlab
2026-10-14 04:30:12
UTC ·
(3 weeks ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-01 12:16:50
UTC ·
(1 month ago)
Web App Attack
🇧🇷
maviei
2026-06-26 07:26:14
UTC ·
(4 months ago)
2026-06-26T04:26:11.188277-03:00 srv1251771 kernel: [2225598.137465] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.94.241 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=56051 DF PROTO=TCP SPT=10348 DPT=8443 W ...
show more
2026-06-26T04:26:11.188277-03:00 srv1251771 kernel: [2225598.137465] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.94.241 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=56051 DF PROTO=TCP SPT=10348 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-06-26T04:26:12.238337-03:00 srv1251771 kernel: [2225599.187507] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.94.241 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=56052 DF PROTO=TCP SPT=10348 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-06-26T04:26:13.261385-03:00 srv1251771 kernel: [2225600.210559] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.94.241 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=56053 DF PROTO=TCP SPT=10348 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan