🇫🇷
dynamix
2026-10-19 14:12:48
(11 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-01 14:03:17
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-09-24 02:52:00
(3 weeks ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-09-17 16:36:39
(1 month ago)
Multiple WAF Violations
Web App Attack
🇬🇧
sandra361
2026-09-05 19:26:32
(1 month ago)
Port scan detected: 6 attempts across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=172.6 ...
show more
Port scan detected: 6 attempts across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=172.69.130.46 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=17018 DF PROTO=TCP SPT=9269 DPT=443 WINDOW=65535 RES=0x00 ACK RST URGP=0
show less
Port Scan
🇧🇪
madeit
2026-08-05 02:12:15
(2 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-03 15:00:20
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 11:00:16.081065 2026] [security2:error] [pid 2713213:tid 2713246] [client 172.69.130.46:12215] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.gryphix.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.gryphix.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "anCtAHcE79tTyH5rkEUozQAAANg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-31 15:11:18
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 11:11:14.335556 2026] [security2:error] [pid 598145:tid 598145] [client 172.69.130.46:13554] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.enriquelaw.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.enriquelaw.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "amy7EuCdO06GPqueEDa-fgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-18 01:39:37
(3 months ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 21:07:41
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 17:07:38.537092 2026] [security2:error] [pid 28051:tid 28051] [client 172.69.130.46:9474] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.sigridsnaturalfoods.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.sigridsnaturalfoods.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "alANmmXa3aVn_2y9Tjm8mgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 23:21:31
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 19:21:26.935929 2026] [security2:error] [pid 16835:tid 16835] [client 172.69.130.46:10992] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.jbrodriguez.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.jbrodriguez.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "akbydgVEr7mfElxCztkN2gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 06:45:43
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 02:45:35.221878 2026] [security2:error] [pid 7070:tid 7070] [client 172.69.130.46:9878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "margroberts.com"] [uri "/.git/HEAD"] [unique_id "ajjaD-fTix6wplyofmOtegAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-09 22:01:49
(4 months ago)
Auto-ban: >3000 req/min op 2026-06-09
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-01 01:04:11
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 21:04:07.146309 2026] [security2:error] [pid 4352:tid 4352] [client 172.69.130.46:11842] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.morninginc.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.morninginc.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ahzah_haIa4uRX-OLpOs7gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 21:18:33
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.130.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 17:18:27.393671 2026] [security2:error] [pid 12762:tid 12770] [client 172.69.130.46:10868] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.gryphix.com|F|2"] [data "[email protected] "] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.gryphix.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ahtUIyvVGkyqolPgyW3XnAAAAQU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
