🇮🇹
mgarofano80
2026-11-10 23:43:06
UTC ·
(19 hours ago)
Brute-Force
Web App Attack
2026-11-10 09:47:06
UTC ·
(1 day ago)
WEB attack
Brute-Force
🇩🇪
filstal.org
2026-11-09 22:56:02
UTC ·
(1 day ago)
Persistent aggressive crawler: 7 repeated bans (unauthorized data harvesting)
Bad Web Bot
🇺🇸
etu brutus
2026-11-09 15:26:32
UTC ·
(2 days ago)
211.249.246.152 Blocked by [Attack Vector List]
...
Hacking
Brute-Force
Exploited Host
🇩🇪
filstal.org
2026-11-09 08:04:15
UTC ·
(2 days ago)
Unauthorized web crawling by known aggressive crawler or data harvesting bot detected by Fail2Ban
Bad Web Bot
🇩🇪
filstal.org
2026-11-06 17:47:40
UTC ·
(5 days ago)
Unauthorized web crawling by known aggressive crawler or data harvesting bot detected by Fail2Ban
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-05 03:42:21
UTC ·
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 211.249.246.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:42:18.174187 2026] [security2:error] [pid 7950:tid 7950] [client 211.249.246.152:44708] ...
show more
(mod_security) mod_security (id:210730) triggered by 211.249.246.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:42:18.174187 2026] [security2:error] [pid 7950:tid 7950] [client 211.249.246.152:44708] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gsrsv.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gsrsv.org"] [uri "/springtimeinc.com"] [unique_id "auv7Gv-RI3p1gi6K5ElzYwAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-11-05 01:29:18
UTC ·
(6 days ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -65.761 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (compatible; KakaoBot/1.0; +https://cs.kakao.com/helps_html/1073213012)
Web App Attack
Bad Web Bot
2026-11-04 02:05:25
UTC ·
(1 week ago)
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=4
Hacking
🇺🇸
TPI-Abuse
2026-11-02 19:12:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 211.249.246.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 14:12:36.172413 2026] [security2:error] [pid 27544:tid 27544] [client 211.249.246.152:3715 ...
show more
(mod_security) mod_security (id:210730) triggered by 211.249.246.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 14:12:36.172413 2026] [security2:error] [pid 27544:tid 27544] [client 211.249.246.152:37158] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||silvermoonherbals.com|F|2"] [data ".moongoth.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "silvermoonherbals.com"] [uri "/www.moongoth.com"] [unique_id "aujgpMslHUlL-iC0XOxPJgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 01:24:51
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 211.249.246.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 21:24:47.127426 2026] [security2:error] [pid 11872:tid 11872] [client 211.249.246.152:3858 ...
show more
(mod_security) mod_security (id:210730) triggered by 211.249.246.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 21:24:47.127426 2026] [security2:error] [pid 11872:tid 11872] [client 211.249.246.152:38588] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.homebuilt.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.homebuilt.org"] [uri "/directory/[email protected] "] [unique_id "auaU3-UAKxzFv7KkFfunBAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
conseilgouz
2026-10-31 13:46:38
UTC ·
(1 week ago)
loe-7 : Trying access unauthorized files/dir=>/liste-des-articles?view=article&id=31:comparaison-scss-less&catid=36:extensions-annexes
Hacking
🇺🇸
TPI-Abuse
2026-10-31 07:16:53
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 211.249.246.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 03:16:49.835682 2026] [security2:error] [pid 4555:tid 4555] [client 211.249.246.152:58968] ...
show more
(mod_security) mod_security (id:210730) triggered by 211.249.246.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 03:16:49.835682 2026] [security2:error] [pid 4555:tid 4555] [client 211.249.246.152:58968] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.coolwebsites.org|F|2"] [data ".djstore.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.coolwebsites.org"] [uri "/www.djstore.com"] [unique_id "auWV4ZJo6npk8mj_LYO86QAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
conseilgouz
2026-10-30 04:58:21
UTC ·
(1 week ago)
low-Joomla User : try to access forms...
Hacking
🇩🇪
filstal.org
2026-10-29 10:15:04
UTC ·
(1 week ago)
Unauthorized web crawling by known aggressive crawler or data harvesting bot detected by Fail2Ban
Bad Web Bot
