🇩🇪
thesimonmanuel
2026-10-24 01:27:15
(1 day ago)
172.70.240.111 - - [24/Oct/2026:06:57:14 +0530] "GET /info.php HTTP/2.0" 499 0 "-" "Mozilla/5.0 (X11 ...
show more
172.70.240.111 - - [24/Oct/2026:06:57:14 +0530] "GET /info.php HTTP/2.0" 499 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
show less
Web App Attack
🇬🇧
Yosi
2026-10-23 20:27:31
(1 day ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇩🇪
www.mammazone.it
2026-10-23 06:25:16
(1 day ago)
[Fri Oct 23 08:23:35.209463 2026] [proxy_fcgi:error] [pid 32151] [client 172.70.240.111:14230] AH010 ...
show more
[Fri Oct 23 08:23:35.209463 2026] [proxy_fcgi:error] [pid 32151] [client 172.70.240.111:14230] AH01071: Got error 'Primary script unknown'
[Fri Oct 23 08:25:15.454833 2026] [access_compat:error] [pid 47423] [client 172.70.240.111:11436] AH01797: client denied by server configuration: /var/www/underdomotic.fabiodirauso.it/web.config
...
show less
Hacking
🇫🇷
Little Iguana
2026-10-22 15:55:02
(2 days ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇩🇪
findlab
2026-10-18 13:20:02
(6 days ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 11:27:02
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.240.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.240.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 07:26:59.784148 2026] [security2:error] [pid 18752:tid 18752] [client 172.70.240.111:12356] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||intergalactichuman.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "intergalactichuman.com"] [uri "/config.php.bak"] [unique_id "atStA8w5VOOHW_pTXBJTtwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 02:48:33
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.240.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.240.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 22:48:26.024497 2026] [security2:error] [pid 27091:tid 27091] [client 172.70.240.111:13475] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tinkerlabyrinth.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tinkerlabyrinth.com"] [uri "/tinkerlabyrinth.sql"] [unique_id "atQzeoQ-j16iyWS2yEQc-wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 01:00:29
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.70.240.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.240.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:00:24.846223 2026] [security2:error] [pid 21534:tid 21534] [client 172.70.240.111:9230] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||kiuchi.info|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kiuchi.info"] [uri "/database.sql"] [unique_id "atQaKKSwWfm5PWLRMOo0CgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 21:33:41
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.70.240.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.240.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 17:33:35.795682 2026] [security2:error] [pid 29026:tid 29149] [client 172.70.240.111:13123] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aceelectricalsupplies.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aceelectricalsupplies.com"] [uri "/admin/config.php.bak"] [unique_id "atPpr6HBv4dEP7CAM6hIlAAAAVg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Yosi
2026-10-17 12:05:38
(1 week ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇫🇷
dynamix
2026-10-14 10:33:24
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 04:38:46
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.70.240.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.240.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 00:38:37.957255 2026] [security2:error] [pid 21835:tid 21835] [client 172.70.240.111:13963] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pascalevial.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pascalevial.com"] [uri "/pascalevial.sql"] [unique_id "as8HTaYn21tux7D7i5Kj4gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-06 13:32:36
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-05 05:43:15
(2 weeks ago)
Web App Attack
🇧🇪
madeit
2026-09-10 07:00:33
(1 month ago)
Web App Attack
