🇺🇸
craudiovizai
2026-11-06 06:30:48
UTC ·
(5 hours ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
Web App Attack
Bad Web Bot
🇧🇪
madeit
2026-11-02 16:20:48
UTC ·
(3 days ago)
Web App Attack
🇺🇸
craudiovizai
2026-10-25 18:30:40
UTC ·
(1 week ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
Web App Attack
Bad Web Bot
🇩🇪
altenglaner
2026-10-22 21:42:24
UTC ·
(2 weeks ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
craudiovizai
2026-10-21 06:30:38
UTC ·
(2 weeks ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
Web App Attack
Bad Web Bot
🇫🇷
dynamix
2026-10-21 00:25:38
UTC ·
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇨🇭
backslash
2026-10-19 18:51:00
UTC ·
(2 weeks ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-18 10:40:20
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:40:12.229245 2026] [security2:error] [pid 23896:tid 23896] [client 172.68.192.137:10233] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:40:12.229245 2026] [security2:error] [pid 23896:tid 23896] [client 172.68.192.137:10233] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||curriergallery.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "curriergallery.com"] [uri "/db.sql"] [unique_id "atSiDOAlNPF27BBry5TpFwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-10-18 08:12:24
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-18T08:11:10.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 06:53:43
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:53:38.348791 2026] [security2:error] [pid 20163:tid 20258] [client 172.68.192.137:10282] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:53:38.348791 2026] [security2:error] [pid 20163:tid 20258] [client 172.68.192.137:10282] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||greencitymethods.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "greencitymethods.com"] [uri "/db.sql"] [unique_id "atRs8litK1LVnn7K56AQpAAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 02:07:13
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 22:07:08.489426 2026] [security2:error] [pid 19623:tid 19623] [client 172.68.192.137:11520] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 22:07:08.489426 2026] [security2:error] [pid 19623:tid 19623] [client 172.68.192.137:11520] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||puckerbikinis.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "puckerbikinis.com"] [uri "/db.sql"] [unique_id "atQpzBhlCghmp-oJaSWZsgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 00:12:29
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:12:19.434011 2026] [security2:error] [pid 20007:tid 20007] [client 172.68.192.137:13005] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:12:19.434011 2026] [security2:error] [pid 20007:tid 20007] [client 172.68.192.137:13005] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||publications.flyingdodostudio.com|F|2"] [data ".flyingdodostudio.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "publications.flyingdodostudio.com"] [uri "/publications.flyingdodostudio.com.sql"] [unique_id "atQO41iMViNkNn0vXsNsAAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 19:55:49
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 15:55:41.408134 2026] [security2:error] [pid 29516:tid 29516] [client 172.68.192.137:12184] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 15:55:41.408134 2026] [security2:error] [pid 29516:tid 29516] [client 172.68.192.137:12184] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ferienwohnungen-eva.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ferienwohnungen-eva.com"] [uri "/rezerv.sql"] [unique_id "atPSvfAmify1rIvX1dNU1AAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
ScchutzZ
2026-10-14 07:05:08
UTC ·
(3 weeks ago)
Fail2Ban banı. Jail: plesk-modsecurity.
Brute-Force
🇫🇷
dynamix
2026-10-13 23:13:38
UTC ·
(3 weeks ago)
Multiple WAF Violations
Web App Attack
