🇸🇪
Juha Jurvanen
2026-11-06 17:10:55
UTC ·
(17 hours ago)
Blocked by Scantide Guard on HTTP. Rule: 5 related observations from 172.87.24.20 within 240 minutes..
Brute-Force
2026-11-06 11:27:17
UTC ·
(22 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
mnsf
2026-11-06 11:05:47
UTC ·
(23 hours ago)
Abuse Detected (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 10:21:44
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.87.24.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:21:38.819592 2026] [security2:error] [pid 8171:tid 8171] [client 172.87.24.20:44570] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 172.87.24.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:21:38.819592 2026] [security2:error] [pid 8171:tid 8171] [client 172.87.24.20:44570] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.lapapevip.spyasociados.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.lapapevip.spyasociados.com"] [uri "/2026.sql"] [unique_id "au2qMjBOpSCF8ZzbIuy4sQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-06 10:01:56
UTC ·
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-11-06 09:50:16
UTC ·
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 09:27:23
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.87.24.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:27:18.444657 2026] [security2:error] [pid 4883:tid 4883] [client 172.87.24.20:55450] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 172.87.24.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:27:18.444657 2026] [security2:error] [pid 4883:tid 4883] [client 172.87.24.20:55450] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jamworldmovements.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jamworldmovements.com"] [uri "/2026.sql"] [unique_id "au2ddqDw75VTKpw2qXg9PAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
IVski.com
2026-11-06 09:25:11
UTC ·
(1 day ago)
IVski WAF | Banner grab scan - zgrab probing service fingerprint
Hacking
Brute-Force
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-11-06 09:06:24
UTC ·
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
mnsf
2026-11-06 08:05:21
UTC ·
(1 day ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 07:52:53
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.87.24.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 02:52:48.652289 2026] [security2:error] [pid 23611:tid 23611] [client 172.87.24.20:39508] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 172.87.24.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 02:52:48.652289 2026] [security2:error] [pid 23611:tid 23611] [client 172.87.24.20:39508] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.backstore.com|F|2"] [data ".backstore.com_2026.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.backstore.com"] [uri "/www.backstore.com_2026.sql"] [unique_id "au2HUKUU7hlrOYE7TPKhywAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
