🇩🇪
Tsumugi Kotobuki
2026-10-21 14:44:41
(1 day ago)
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 57 | Len: 60B | Win: ...
show more
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 57 | Len: 60B | Win: 65535(1) | F2B/ufw-honeypot@2026-10-21T14:44:41Z
show less
Port Scan
Hacking
🇫🇷
dynamix
2026-10-21 11:51:08
(1 day ago)
Multiple WAF Violations
Web App Attack
🇨🇭
copestack
2026-10-20 01:30:16
(3 days ago)
Honeypot hit on ov-4e5936 (fail2ban jail: nginx-compat)
Web App Attack
2026-10-19 02:17:38
(4 days ago)
IP matched detection query many 3xx errors.
Brute-Force
🇫🇷
dynamix
2026-10-18 10:21:02
(4 days ago)
Automated scan for exposed backup archives, source code and database dumps
Web App Attack
🇫🇷
dynamix
2026-10-16 07:07:59
(6 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 01:58:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.247.118 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.247.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:58:23.517433 2026] [security2:error] [pid 5190:tid 5190] [client 172.71.247.118:13859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title34.itaxcenter.com"] [uri "/.git/config"] [unique_id "atAzP8hN_n3vqVh5rkpFvQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 23:57:33
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.247.118 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.247.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 19:57:25.723820 2026] [security2:error] [pid 7326:tid 7326] [client 172.71.247.118:11324] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||waynemather.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "waynemather.com"] [uri "/database.sql"] [unique_id "atAW5XyLJx6vdMsd-Ynq6AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-14 02:12:30
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 00:37:21
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.247.118 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.247.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:37:14.764785 2026] [security2:error] [pid 20028:tid 20028] [client 172.71.247.118:11239] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||andrewmcgrath.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "andrewmcgrath.com"] [uri "/andrewmcgrath.sql"] [unique_id "as7OuoRKn-i3Dh6qjBIoPQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 23:46:56
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.247.118 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.247.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:46:48.576262 2026] [security2:error] [pid 12531:tid 12551] [client 172.71.247.118:12412] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.killasgarage.bike|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.killasgarage.bike"] [uri "/admin/config.php.bak"] [unique_id "as7C6N_CBqmTf8cqeHnGsQAAAU8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 23:15:09
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.247.118 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.247.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:15:01.157145 2026] [security2:error] [pid 16345:tid 16360] [client 172.71.247.118:12807] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||atechtransmission.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "atechtransmission.com"] [uri "/db.sql"] [unique_id "as67dWmPxoSPNzmoo1gD8wAAAcc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-08 00:33:51
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-03 21:56:53
(2 weeks ago)
Web App Attack