🇫🇷
bigorre.org
2026-05-30 03:27:27
(5 days ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-27 23:06:21
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 19:05:20.135244 2026] [security2:error] [pid 7610:tid 7610] [client 198.105.100.73:37633] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mobile.hatfulofrain.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mobile.hatfulofrain.com"] [uri "/backup.sql"] [unique_id "ahd4sOzkWIX55YW0JiW6ZAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-05-27 22:01:18
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-26.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-05-27 19:26:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 15:26:11.363984 2026] [security2:error] [pid 4099:tid 4099] [client 198.105.100.73:46775] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lanuevaley.com"] [uri "/wp-config.php.swp"] [unique_id "ahdFU_5UD7Nk5cDPwA72iwAAABw"], referer: https://www.google.com/search?q=lanuevaley.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 18:05:47
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 14:05:41.464085 2026] [security2:error] [pid 1929:tid 1929] [client 198.105.100.73:40827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "modelengines.info"] [uri "/.env.save"] [unique_id "ahcydU_Zi4AwBKyOhLOvJAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 17:50:45
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:949110) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 13:50:34.762754 2026] [security2:error] [pid 14068:tid 14068] [client 198.105.100.73:50709] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.letahitibookings.hamiltonbookings.com"] [uri "/.env.development.local"] [unique_id "ahcu6jhmSz-L3DuCEjRUZgAAAAc"], referer: https://www.google.com/search?q=www.letahitibookings.hamiltonbookings.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-27 17:50:03
(1 week ago)
| Suspicious URL access.
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-05-27 00:58:32
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:58:23.500424 2026] [security2:error] [pid 21560:tid 21560] [client 198.105.100.73:58817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tatethegreat.com"] [uri "/.env.save"] [unique_id "ahZBr1p8szwQYXXQYGqKtgAAAAE"], referer: https://www.google.com/search?q=tatethegreat.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 00:23:34
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:23:24.374677 2026] [security2:error] [pid 6031:tid 6031] [client 198.105.100.73:60641] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||weathercarib.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "weathercarib.com"] [uri "/config/master.key"] [unique_id "ahY5fNBj_nE-2fcp4TsioAAAAAY"], referer: https://www.google.com/search?q=weathercarib.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-05-26 18:27:02
(1 week ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇩🇪
HandyTreff.de
2026-05-26 18:21:53
(1 week ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -31.941 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -31.941 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.11
show less
Web App Attack
Bad Web Bot
🇺🇸
gumbysoft
2026-05-26 18:10:03
(1 week ago)
Unauthorized web vulnerability scan (/.env, wordpress, etc.)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-26 18:05:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 198.105.100.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 14:05:22.354552 2026] [security2:error] [pid 14489:tid 14521] [client 198.105.100.73:49515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lasertagandgames.lasertagmetairie.com"] [uri "/wp-config.php.swp"] [unique_id "ahXg4mnnjm3h_PZqVX4ZeAAAAQA"], referer: https://www.google.com/search?q=lasertagandgames.lasertagmetairie.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-21 15:23:07
(2 weeks ago)
LH-Watcher: OVERSEAS FAKE_ID [Fake Googlebot]
Bad Web Bot
🇺🇸
ChamberofCommerce.com
2023-11-06 00:24:24
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot