🇺🇸
TPI-Abuse
2026-03-14 10:15:45
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 194.70.234.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 194.70.234.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 06:14:59.797430 2026] [security2:error] [pid 11959:tid 11959] [client 194.70.234.232:40213] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hansen II/Thumbs.db"] [unique_id "abU1IzK5j_Vl9S98oS3niQAAAA4"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Hansen%20II/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-11 13:42:03
(2 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
2026-01-05 15:58:41
(5 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇨🇭
backslash
2025-12-01 10:20:06
(6 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇩🇪
HandyTreff.de
2025-11-30 00:06:41
(6 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -24.111 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -24.111 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1729.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-25 01:28:56
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 194.70.234.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 194.70.234.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 21:28:52.057918 2025] [security2:error] [pid 30577:tid 30577] [client 194.70.234.232:34713] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bernsteinip.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aNSa1KIDfETNd-7t7R3s6AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-24 13:22:16
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 194.70.234.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 194.70.234.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 09:22:10.650754 2025] [security2:error] [pid 24631:tid 24631] [client 194.70.234.232:25591] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||the-it-man.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "the-it-man.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aNPwgvTxexyQm4BM9_f4owAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2025-09-22 17:40:49
(8 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2025-09-21 00:44:34
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 194.70.234.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 194.70.234.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 20 20:44:30.378202 2025] [security2:error] [pid 28022:tid 28022] [client 194.70.234.232:52617] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||harwoodmechanical.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "harwoodmechanical.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aM9Kbq97gX823icJUSN62gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-27 03:18:07
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 194.70.234.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 194.70.234.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 26 22:18:01.971641 2025] [security2:error] [pid 31706:tid 31706] [client 194.70.234.232:58895] [client 194.70.234.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edmundtadros.com"] [uri "/.env"] [unique_id "Z7_ZafRU6IkJ3Mv2N_hGmAAAAAI"], referer: https://tasamm.com/about/eee14.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
sms.ru
2024-09-28 20:00:12
(1 year ago)
SMS pumping attack from foreign country
DDoS Attack