🇩🇪
filstal.org
2026-11-10 08:27:56
UTC ·
(3 hours ago)
Unauthorized web crawling by known aggressive crawler or data harvesting bot detected by Fail2Ban
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-10 06:11:03
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210730) triggered by 211.183.208.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:10:58.136811 2026] [security2:error] [pid 24745:tid 24745] [client 211.183.208.243:4104 ...
show more
(mod_security) mod_security (id:210730) triggered by 211.183.208.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:10:58.136811 2026] [security2:error] [pid 24745:tid 24745] [client 211.183.208.243:41042] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pswebsite.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pswebsite.com"] [uri "/goggle.com"] [unique_id "avK1ctyjspGWpsBcJcMSRQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
etu brutus
2026-11-09 15:25:12
UTC ·
(20 hours ago)
211.183.208.243 Blocked by [Attack Vector List]
...
Hacking
Brute-Force
Exploited Host
🇩🇪
filstal.org
2026-11-09 08:03:59
UTC ·
(1 day ago)
Unauthorized web crawling by known aggressive crawler or data harvesting bot detected by Fail2Ban
Bad Web Bot
🇺🇸
LotPhantom
2026-11-06 14:33:02
UTC ·
(3 days ago)
211.183.208.243 - - [06/Nov/2026:14:32:42 +0000] "GET /robots.txt HTTP/2.0" 200 57 "-" "Mozilla/5.0 (compatible; KakaoBot/1.0; +https://developers.kakao.com/bot)"
...
Web App Attack
Bad Web Bot
2026-11-05 20:17:03
UTC ·
(4 days ago)
WEB attack
Brute-Force
2026-11-04 02:05:20
UTC ·
(6 days ago)
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=3
Hacking
🇩🇪
HandyTreff.de
2026-11-02 12:06:02
UTC ·
(1 week ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -66.317 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (compatible; KakaoBot/1.0; +https://cs.kakao.com/helps_html/1073213012)
Web App Attack
Bad Web Bot
🇫🇷
conseilgouz
2026-11-02 10:03:59
UTC ·
(1 week ago)
loe-7 : Trying access unauthorized files/dir=>/login?return=aHR0cHM6Ly9sb21hcnQuZnIvZm9ydW0vc2Nzcy1jb21waWxlci8xMzYtZG9lc250LXdvcmstYWZ0ZXItMS1jb21waWxl
Hacking
🇺🇸
TPI-Abuse
2026-11-02 00:53:08
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 211.183.208.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 19:53:04.536405 2026] [security2:error] [pid 16306:tid 16306] [client 211.183.208.243:4332 ...
show more
(mod_security) mod_security (id:210730) triggered by 211.183.208.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 19:53:04.536405 2026] [security2:error] [pid 16306:tid 16306] [client 211.183.208.243:43322] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.windisfun.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.windisfun.com"] [uri "/foothillskiteclub.com"] [unique_id "aufe8CaZRCt2bdhFC1NEWAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 06:29:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 211.183.208.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:29:12.531868 2026] [security2:error] [pid 18383:tid 18383] [client 211.183.208.243:3376 ...
show more
(mod_security) mod_security (id:210730) triggered by 211.183.208.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:29:12.531868 2026] [security2:error] [pid 18383:tid 18383] [client 211.183.208.243:33766] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.player-care.com|F|2"] [data ".spencerserolls.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.player-care.com"] [uri "/cb/www.spencerserolls.com"] [unique_id "aubcOMHOoNvcB2qRNNjD8QAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 02:27:53
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 211.183.208.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 22:27:49.102748 2026] [security2:error] [pid 1505:tid 1505] [client 211.183.208.243:60802] ...
show more
(mod_security) mod_security (id:210730) triggered by 211.183.208.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 22:27:49.102748 2026] [security2:error] [pid 1505:tid 1505] [client 211.183.208.243:60802] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tausiet.com|F|2"] [data ".blogspot.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tausiet.com"] [uri "/tausiet/palabras/cimidos.blogspot.com"] [unique_id "auajpWW4X8Mu8gNJkY3FbAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 01:24:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 211.183.208.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 21:24:53.158412 2026] [security2:error] [pid 19970:tid 19970] [client 211.183.208.243:4662 ...
show more
(mod_security) mod_security (id:210730) triggered by 211.183.208.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 21:24:53.158412 2026] [security2:error] [pid 19970:tid 19970] [client 211.183.208.243:46620] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.homebuilt.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.homebuilt.org"] [uri "/directory/[email protected] "] [unique_id "auaU5fdBaUKLsTqX8rY_EAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇸
Smel
2026-10-31 13:52:01
UTC ·
(1 week ago)
HTTP/80/443/8080 Unauthorized Probe, Hack -
Hacking
Web App Attack
🇫🇷
conseilgouz
2026-10-31 06:58:20
UTC ·
(1 week ago)
low-Joomla User : try to access forms...
Hacking
