2026-07-01 09:19:19
(5 hours ago)
FortiWeb WAF: 390 attacks detected. Threat Score: 206800. Types: Client Management(195), Block IP Li ...
show more
FortiWeb WAF: 390 attacks detected. Threat Score: 206800. Types: Client Management(195), Block IP List(195). Origin: United States.
show less
Web App Attack
2026-07-01 06:35:03
(7 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇩🇪
FeG Deutschland
2026-07-01 01:34:44
(12 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-30 17:20:07
(21 hours ago)
(mod_security) mod_security (id:210730) triggered by 18.206.244.28 (ec2-18-206-244-28.compute-1.amaz ...
show more
(mod_security) mod_security (id:210730) triggered by 18.206.244.28 (ec2-18-206-244-28.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 13:20:00.784022 2026] [security2:error] [pid 17519:tid 17519] [client 18.206.244.28:59722] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.techspertnet.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.techspertnet.com"] [uri "/[email protected] "] [unique_id "akP6wBOewYZjtF49CBY2mwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-30 16:59:03
(21 hours ago)
WEB attack
Brute-Force
🇺🇸
TPI-Abuse
2026-06-30 08:15:19
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 18.206.244.28 (ec2-18-206-244-28.compute-1.amaz ...
show more
(mod_security) mod_security (id:210730) triggered by 18.206.244.28 (ec2-18-206-244-28.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 04:15:14.695472 2026] [security2:error] [pid 3069:tid 3069] [client 18.206.244.28:51074] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.khaoula.com|F|2"] [data ".monmaghreb.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.khaoula.com"] [uri "/sante.monmaghreb.com"] [unique_id "akN7Ev1j4DGf7xmeeOGS1QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
findlab
2026-06-29 23:05:01
(1 day ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
2026-06-29 09:18:59
(2 days ago)
FortiWeb WAF: 860 attacks detected. Threat Score: 100200. Types: Client Management(430), Block IP Li ...
show more
FortiWeb WAF: 860 attacks detected. Threat Score: 100200. Types: Client Management(430), Block IP List(430). Origin: United States.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 07:42:05
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 18.206.244.28 (ec2-18-206-244-28.compute-1.amaz ...
show more
(mod_security) mod_security (id:210730) triggered by 18.206.244.28 (ec2-18-206-244-28.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 03:41:58.398347 2026] [security2:error] [pid 27603:tid 27663] [client 18.206.244.28:37138] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.munatseng.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.munatseng.org"] [uri "/stories/tsengkwongchi.com"] [unique_id "akIhxtxOQAD6MggGqG9q5wAAAMQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-29 04:03:00
(2 days ago)
block ruleset 472AFD7D6750E9A3D2A86F61D10BB1FAEABA5F57
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-29 02:43:05
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 18.206.244.28 (ec2-18-206-244-28.compute-1.amaz ...
show more
(mod_security) mod_security (id:210730) triggered by 18.206.244.28 (ec2-18-206-244-28.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 22:42:57.957859 2026] [security2:error] [pid 23546:tid 23546] [client 18.206.244.28:34564] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||home.agingworkforcenews.com|F|2"] [data ".myceridian.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "home.agingworkforcenews.com"] [uri "/2005/08/http/www.myceridian.com"] [unique_id "akHbsdxQ09Ec314jaC78MQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2026-06-28 04:32:29
(3 days ago)
Many_bad_calls
Web App Attack
🇺🇸
mnsf
2026-06-28 01:05:02
(3 days ago)
Too many Status 40X (12)
Request Overload (189)
Brute-Force
Web App Attack
2026-06-27 19:03:58
(3 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 92%, Country: US, Attack patterns: Auto ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 92%, Country: US, Attack patterns: Automated scanning
show less
Bad Web Bot
Web App Attack
2026-06-27 18:31:06
(3 days ago)
No-JS Bot: 16 requests / Exceeded reCAPTCHA attempts
Bad Web Bot