🇺🇸
TPI-Abuse
2026-07-19 14:27:06
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 207.204.103.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 207.204.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 10:26:58.979660 2026] [security2:error] [pid 22552:tid 22577] [client 207.204.103.62:15109] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dasperformance.com|F|2"] [data ".das performance.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dasperformance.com"] [uri "/blog/page/2/W WW.DAS performance.com"] [unique_id "alzesqVCrGyDjHAONiLAVAAAAVc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
gui-ying233
2026-07-09 00:05:45
(1 week ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
Hmorrin
2026-06-26 03:16:10
(3 weeks ago)
Port Scan
🇺🇸
mnsf
2026-06-22 10:07:10
(4 weeks ago)
Login Too Frequent (8)
Brute-Force
Web App Attack
2026-06-08 18:15:55
(1 month ago)
Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 | Attack Signatur ...
show more
Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 | Attack Signature Blocked: /wishlist/index/add/product/13682/form_key/Oy1Odvpc12GcF11K/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G...
show less
Hacking
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-06-07 01:32:58
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
EGP Abuse Dept
2026-05-04 04:00:18
(2 months ago)
Scraping webshop URLs (www.badgehouder.nl), likely botnet drone
Bad Web Bot
Exploited Host
🇦🇺
MAGIC
2026-05-01 00:29:25
(2 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-08 03:53:55
(3 months ago)
(mod_security) mod_security (id:217210) triggered by 207.204.103.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:217210) triggered by 207.204.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 23:53:47.360236 2026] [security2:error] [pid 2618549:tid 2618549] [client 207.204.103.62:5083] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||zee7easts.top|F|4"] [data "GET http://zee7easts.top HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "zee7easts.top"] [uri "/"] [unique_id "adXRSw6uIGigVFpcuH2kwQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-04-02 02:08:16
(3 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇳🇱
melroy89
2026-04-02 00:53:39
(3 months ago)
207.204.103.62 - - [02/Apr/2026:02:31:19 +0200] "GET /m/[email protected] /t/374545/Indie-develo ...
show more
207.204.103.62 - - [02/Apr/2026:02:31:19 +0200] "GET /m/[email protected] /t/374545/Indie-developer-behind-Overwhelmingly-Positive-rated-shipbuilder-argues-that-Steam-s/comment/3374301/votes/up HTTP/1.1" 302 282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "kbin.melroy.org" 0.019
...
show less
DDoS Attack
🇮🇩
hermawan
2026-03-13 10:20:18
(4 months ago)
03/13/2026-17:19:15.686389 [Drop] [**] [1:9200003:0] Coba - reject apa masuk matomo appears 430 tim ...
show more
03/13/2026-17:19:15.686389 [Drop] [**] [1:9200003:0] Coba - reject apa masuk matomo appears 430 times match dipake google crawler 66-249-73-193 JA4 hash brazil [**] [Classification: (null)] [Priority: 3] {TCP} 207.204.103.62:64190 -> 103.166.156.58:443
...
show less
Email Spam
Hacking
🇨🇭
backslash
2026-03-07 05:03:25
(4 months ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
2026-03-06 10:38:43
(4 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇨🇭
backslash
2026-02-04 11:35:07
(5 months ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot