🇨🇭
4server
2026-09-29 02:34:22
(2 weeks ago)
[TueSep2904:34:18.9251212026][security2:error][pid4170674:tid4170706][client193.202.82.101:0]ModSecu ...
show more
[TueSep2904:34:18.9251212026][security2:error][pid4170674:tid4170706][client193.202.82.101:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"leonitraslochi.ch\"][uri\"/xmlrpc.php\"][unique_id\"arsjqkYrK9pgembvHcQBCQAAANg\"]
show less
Hacking
Web App Attack
🇨🇭
backslash
2026-05-01 08:30:36
(5 months ago)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-29 22:44:53
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 193.202.82.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 193.202.82.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 18:44:50.355145 2026] [security2:error] [pid 16128:tid 16128] [client 193.202.82.101:25435] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.anorexia.disabilitiesdespair.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.anorexia.disabilitiesdespair.com"] [uri "/s3cmd.ini"] [unique_id "afKJ4lDXhnZkszhurA0-TgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 08:07:47
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 193.202.82.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 193.202.82.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 04:07:43.314588 2026] [security2:error] [pid 12397:tid 12397] [client 193.202.82.101:56671] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.ecomim.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ecomim.com"] [uri "/s3cmd.ini"] [unique_id "ae8ZT0-U6nvKZj_9J0NoZQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 20:11:59
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 193.202.82.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 193.202.82.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 16:11:52.513960 2026] [security2:error] [pid 13742:tid 13742] [client 193.202.82.101:11615] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sailsara.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sailsara.com"] [uri "/s3cmd.ini"] [unique_id "ae5xiAITVs1arCJtCVNtbwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
agenciahypelab.com.br
2026-04-13 06:38:40
(6 months ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-01-22 12:37:48
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.82.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.82.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 07:37:43.715002 2026] [security2:error] [pid 28040:tid 28040] [client 193.202.82.101:58335] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||crittergetterpestcontrol.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "crittergetterpestcontrol.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXIaF6mJKz_jrIqxxVJCrgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2025-09-30 08:03:44
(1 year ago)
WP probing for vulnerabilities
Hacking
Exploited Host
🇬🇧
mpqtyler
2025-09-24 09:00:37
(1 year ago)
Failed order. WooCommerce store.
Fraud Orders
🇩🇪
Packets-Decreaser.NET
2025-09-23 06:02:23
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-03-11 04:35:58
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 193.202.82.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 193.202.82.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 11 00:35:52.270195 2025] [security2:error] [pid 797:tid 797] [client 193.202.82.101:53077] [client 193.202.82.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "owenbee.bridgital.com"] [uri "/.env"] [unique_id "Z8-9qOHqtKQJ2a0up0-LnwAAAAo"], referer: https://tasamm.com/about/mmm302.html
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-09-27 01:26:50
(2 years ago)
Ports: 110,995; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇷🇺
sms.ru
2024-09-20 21:35:06
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
🇺🇸
VSM Networks
2022-06-19 09:01:14
(4 years ago)
Credential Stuffing
Brute-Force