🇫🇷
dynamix
2026-06-22 18:43:12
(1 day ago)
Multiple WAF Violations
Web App Attack
🇫🇷
masterguru
2026-06-22 16:44:36
(1 day ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)
Hacking
🇫🇷
masterguru
2026-06-22 02:50:46
(2 days ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)
Hacking
🇬🇧
consul.to
2026-06-22 02:24:35
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
masterguru
2026-06-22 01:05:23
(2 days ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-197)
Hacking
🇬🇧
consul.to
2026-06-21 02:14:49
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
dynamix
2026-03-01 18:51:57
(3 months ago)
Multiple WAF Violations
Web App Attack
🇳🇿
Antinson
2026-03-01 15:56:22
(3 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇬🇧
consul.to
2026-03-01 01:35:22
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇿
Antinson
2026-02-24 18:27:57
(3 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-24 15:26:30
(3 months ago)
(mod_security) mod_security (id:240000) triggered by 173.239.196.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240000) triggered by 173.239.196.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 10:26:24.402514 2026] [security2:error] [pid 17954:tid 17954] [client 173.239.196.121:53605] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||cayman-boat-registration.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "cayman-boat-registration.com"] [uri "/images/stories/themes.php"] [unique_id "aZ3DIG6XQu4w_MF-jPHTHwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Shaik Sai Meera
2026-02-24 13:50:10
(3 months ago)
IM360 WAF: Infectors: Suspicious access attempt (webshell)
Brute-Force
FTP Brute-Force
Open Proxy
🇺🇸
TPI-Abuse
2026-02-24 09:06:58
(4 months ago)
(mod_security) mod_security (id:240000) triggered by 173.239.196.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240000) triggered by 173.239.196.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 04:06:53.902629 2026] [security2:error] [pid 17073:tid 17178] [client 173.239.196.121:47173] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||castaspell.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "castaspell.com"] [uri "/images/stories/themes.php"] [unique_id "aZ1qLaSFI39zUuYp9kG4mAAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 06:24:13
(4 months ago)
(mod_security) mod_security (id:240000) triggered by 173.239.196.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240000) triggered by 173.239.196.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 01:24:07.996048 2026] [security2:error] [pid 15620:tid 15620] [client 173.239.196.121:48967] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||johnlittlehorn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "johnlittlehorn.com"] [uri "/images/stories/themes.php"] [unique_id "aZ1EB4aGK-vCqmn9FVspjwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 02:32:33
(4 months ago)
(mod_security) mod_security (id:240000) triggered by 173.239.196.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240000) triggered by 173.239.196.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 21:32:27.564076 2026] [security2:error] [pid 15448:tid 15484] [client 173.239.196.121:42883] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||ennerdale.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "ennerdale.org"] [uri "/images/stories/themes.php"] [unique_id "aZ0Nu8gHPOXsGaJnhuCkfQAAAYI"]
show less
Brute-Force
Bad Web Bot
Web App Attack