🇺🇸
TPI-Abuse
2026-10-28 15:29:40
(4 hours ago)
(mod_security) mod_security (id:240000) triggered by 212.30.33.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 11:29:33.896010 2026] [security2:error] [pid 14924:tid 14924] [client 212.30.33.79:47219] Mod ...
show more
(mod_security) mod_security (id:240000) triggered by 212.30.33.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 11:29:33.896010 2026] [security2:error] [pid 14924:tid 14924] [client 212.30.33.79:47219] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||mrsreclamation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "mrsreclamation.com"] [uri "/images/stories/themes.php"] [unique_id "auIU3c_d53jXF650fEg1jwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-28 15:02:39
(5 hours ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Site.eu
2026-10-22 14:27:40
(6 days ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
WeCloudit-Anti-Abuse
2026-10-18 02:56:09
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇫🇷
dynamix
2026-10-17 14:48:36
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
dot.mg
2026-10-17 14:10:07
(1 week ago)
Bad behaviour
Web Spam
2026-10-17 08:07:22
(1 week ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ES, Attack patterns: WordPress scanning, Webshell probing
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-16 10:06:25
(1 week ago)
Multiple WAF Violations
Web App Attack
2026-10-16 07:11:39
(1 week ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ES, Attack patterns: WordPress scanning, Webshell probing
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 05:51:07
(1 week ago)
(mod_security) mod_security (id:240000) triggered by 212.30.33.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:51:02.962989 2026] [security2:error] [pid 22609:tid 22609] [client 212.30.33.79:55225] Mod ...
show more
(mod_security) mod_security (id:240000) triggered by 212.30.33.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:51:02.962989 2026] [security2:error] [pid 22609:tid 22609] [client 212.30.33.79:55225] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||michaelholdawayvideos.info|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "michaelholdawayvideos.info"] [uri "/images/stories/themes.php"] [unique_id "atG7RvsKs2sFA9klIu5gjQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
solution.it
2026-10-13 17:03:15
(2 weeks ago)
[Tue Oct 13 19:03:15.188924 2026] [php7:error] [pid 3328558:tid 3328558] [client 212.30.33.79:33527] script '/var/www/html/natural.php' not found or unable to stat
Web App Attack
2026-10-13 02:34:50
(2 weeks ago)
IP matched detection query many 3xx errors.
Brute-Force
🇳🇱
Alt255
2026-10-13 01:05:42
(2 weeks ago)
[livebd] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 212.30.33.79 - - [13/Oct/2026:03:05:16 +0200] "GET /wp-content/plugins/elementor/ HTTP/1.1" 404 2043 "-" "Mozilla/5.0 (Windows NT 10.0 ...
show more
[livebd] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 212.30.33.79 - - [13/Oct/2026:03:05:16 +0200] "GET /wp-content/plugins/elementor/ HTTP/1.1" 404 2043 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
212.30.33.79 - - [13/Oct/2026:03:05:16 +0200] "GET /wp-includes/IXR/ HTTP/1.1" 404 2043 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
212.30.33.79 - - [13/Oct/2026:03:05:16 +0200] "GET /wp-includes/widgets/ HTTP/1.1" 404 2043 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
212.30.33.79 - - [
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-12 22:49:22
(2 weeks ago)
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 212.30.33.79 - - [13/Oct/2026:00:49:22 +0200] "GET /.wp/wso.php HTTP/1.1" 301 544 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.3 ...
show more
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 212.30.33.79 - - [13/Oct/2026:00:49:22 +0200] "GET /.wp/wso.php HTTP/1.1" 301 544 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-12 18:01:03
(2 weeks ago)
Multiple WAF Violations
Web App Attack
