🇺🇸
nationaleventpros.com
2026-11-06 09:48:58
UTC ·
(5 hours ago)
vulnerability scan
Web App Attack
🇺🇸
francelink.fr
2026-11-05 09:33:24
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-05T09:32:07.000Z.
Web App Attack
🇫🇷
Tilellit.PRO
2026-11-05 03:43:33
UTC ·
(1 day ago)
Web application probing for unlinked paths and hidden files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-05 01:56:13
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 207.56.216.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:56:09.883586 2026] [security2:error] [pid 4964:tid 4964] [client 207.56.216.206:42000] M ...
show more
(mod_security) mod_security (id:210730) triggered by 207.56.216.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:56:09.883586 2026] [security2:error] [pid 4964:tid 4964] [client 207.56.216.206:42000] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||salernospizza.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "salernospizza.com"] [uri "/o9dzbcqmu1otj0.bak"] [unique_id "auviOfhnGQPSpf_FavR09AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 00:05:00
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 207.56.216.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 19:04:57.924814 2026] [security2:error] [pid 26409:tid 26409] [client 207.56.216.206:55962] ...
show more
(mod_security) mod_security (id:210730) triggered by 207.56.216.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 19:04:57.924814 2026] [security2:error] [pid 26409:tid 26409] [client 207.56.216.206:55962] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||alltecmachinerepair.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alltecmachinerepair.com"] [uri "/vzxfevq8l7ksz9.bak"] [unique_id "auvIKc7d1fZDvE3w7npF9AAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-04 23:55:30
UTC ·
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇷
Stara
2026-11-04 22:39:48
UTC ·
(1 day ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 21:37:38
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 207.56.216.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:37:30.882739 2026] [security2:error] [pid 849:tid 849] [client 207.56.216.206:48154] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 207.56.216.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:37:30.882739 2026] [security2:error] [pid 849:tid 849] [client 207.56.216.206:48154] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.noreservationslocations.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.noreservationslocations.com"] [uri "/yihmut89tvsjg8.bak"] [unique_id "auulmmLJ1Fp0ZA55vjvZAwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-11-04 21:25:39
UTC ·
(1 day ago)
vulnerability scan
Web App Attack
🇫🇷
dynamix
2026-11-04 18:29:58
UTC ·
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
francelink.fr
2026-11-04 18:00:27
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-04T17:57:29.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 17:40:27
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 207.56.216.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:40:19.197624 2026] [security2:error] [pid 2235:tid 2235] [client 207.56.216.206:44226] M ...
show more
(mod_security) mod_security (id:210730) triggered by 207.56.216.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:40:19.197624 2026] [security2:error] [pid 2235:tid 2235] [client 207.56.216.206:44226] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||meierstavern.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "meierstavern.com"] [uri "/8ba0z1bv9q8tvw.bak"] [unique_id "autuA7tYwFhb684SJDsCCAAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
