🇩🇪
HandyTreff.de
2026-02-24 06:26:54
(3 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -40.334 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -40.334 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.
show less
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-17 00:24:08
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 184.174.25.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 184.174.25.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 19:23:35.833264 2026] [security2:error] [pid 5944:tid 5944] [client 184.174.25.205:33565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/wp-config.php.inc"] [unique_id "aWrWh-bIthP33TtAw_dFvwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 19:07:49
(5 months ago)
(mod_security) mod_security (id:211190) triggered by 184.174.25.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:211190) triggered by 184.174.25.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 14:07:39.889525 2025] [security2:error] [pid 22842:tid 23013] [client 184.174.25.205:40513] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||ftp.kettlehill.net|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /filemanager/ajax_calls.php?action=get_file&sub_action=preview&preview_mode=text&title=source&file=../../../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.kettlehill.net"] [uri "/filemanager/ajax_calls.php"] [unique_id "aVLRe1KoonkfA7MmLZcSQgAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-13 14:57:18
(7 months ago)
(mod_security) mod_security (id:211190) triggered by 184.174.25.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:211190) triggered by 184.174.25.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 09:57:13.567863 2025] [security2:error] [pid 11857:tid 11857] [client 184.174.25.205:41299] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||ftp.nbcnewsradio.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /horde/util/barcode.php?type=../../../../../../../../../../../etc/./passwd%00"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/horde/util/barcode.php"] [unique_id "aRXxyZxVhERNjOzLttBRpwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-27 00:19:21
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 184.174.25.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 184.174.25.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:19:08.774720 2025] [security2:error] [pid 172499:tid 172619] [client 184.174.25.205:47667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.kettlehill.com"] [uri "/.env_sample"] [unique_id "aIVwfIEn7YGnahfIo_jD8AAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-29 17:17:21
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 184.174.25.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 184.174.25.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 13:17:09.853439 2025] [security2:error] [pid 3050284:tid 3050284] [client 184.174.25.205:60333] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ftp.farmers123.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.farmers123.com"] [uri "/IND780/excalweb.dll"] [unique_id "aDiWldgfB1NVXRSFoJP1BgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oncord
2024-05-08 20:15:13
(2 years ago)
Form spam
Web Spam
🇬🇧
oncord
2024-05-06 07:25:25
(2 years ago)
Form spam
Web Spam
🇺🇸
oncord
2024-05-01 13:33:30
(2 years ago)
Form spam
Web Spam
🇨🇭
backslash
2024-04-30 09:45:42
(2 years ago)
Web Spam
🇦🇺
oncord
2024-04-29 11:17:45
(2 years ago)
Form spam
Web Spam
🇦🇺
oncord
2024-04-26 22:02:27
(2 years ago)
Form spam
Web Spam
🇦🇺
oncord
2024-04-24 15:39:16
(2 years ago)
Form spam
Web Spam
🇺🇸
ChamberofCommerce.com
2023-11-06 00:53:11
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot
🇺🇸
ChamberofCommerce.com
2023-10-30 20:08:26
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:227
show less
Bad Web Bot