🇺🇸
jakob
2026-11-07 11:07:40
UTC ·
(4 hours ago)
Fail2Ban rule: apache-cgit (robots.txt violation)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-29 02:15:14
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 213.139.63.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 22:15:06.971466 2026] [security2:error] [pid 32210:tid 32210] [client 213.139.63.114:40326] ...
show more
(mod_security) mod_security (id:210730) triggered by 213.139.63.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 22:15:06.971466 2026] [security2:error] [pid 32210:tid 32210] [client 213.139.63.114:40326] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thehunterstomb.com|F|2"] [data ".thehunterstomb.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thehunterstomb.com"] [uri "/indus/www.thehunterstomb.com"] [unique_id "auKsKtAW63Zdby-a60MqVAAAABo"], referer: http://thehunterstomb.com/indus/vengeance8.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
pavel Karpenko
2026-10-13 21:48:33
UTC ·
(3 weeks ago)
213.139.63.114 - - [13/Oct/2026:21:48:33 +0000] "GET /transfer/?code=CH&company=Mercata+Sagl&company_country=CH&country=CH&lang=en&months=12&scope=ripe_from&share=ff622cf09b80855e&view=company HTTP/1.1" 401 641 "https://ultralir.com" "Mozilla/5.0 (Ma ...
show more
213.139.63.114 - - [13/Oct/2026:21:48:33 +0000] "GET /transfer/?code=CH&company=Mercata+Sagl&company_country=CH&country=CH&lang=en&months=12&scope=ripe_from&share=ff622cf09b80855e&view=company HTTP/1.1" 401 641 "https://ultralir.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" client_port=34574 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=85.137.24.2 epoch=1791928113.853 visitor_cookie=0
show less
DDoS Attack
🇷🇸
pavel Karpenko
2026-10-12 18:59:50
UTC ·
(3 weeks ago)
213.139.63.114 - - [12/Oct/2026:21:59:50 +0300] "GET /transfer/?company_country=DE&counterparty_country=ES&country=DE&lang=de&months=6&share=49a05e74cf225f16&view=companies HTTP/2.0" 302 0 "https://ultralir.com" "Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
213.139.63.114 - - [12/Oct/2026:21:59:50 +0300] "GET /transfer/?company_country=DE&counterparty_country=ES&country=DE&lang=de&months=6&share=49a05e74cf225f16&view=companies HTTP/2.0" 302 0 "https://ultralir.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" client_port=39242 server_port=443 rt=0.009 urt=0.009 transfer_entry=- server_addr=195.133.18.6 epoch=1791831590.248
show less
DDoS Attack
🇺🇸
TPI-Abuse
2026-10-09 12:39:56
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 213.139.63.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 08:39:50.752471 2026] [security2:error] [pid 23198:tid 23198] [client 213.139.63.114:44114] ...
show more
(mod_security) mod_security (id:225170) triggered by 213.139.63.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 08:39:50.752471 2026] [security2:error] [pid 23198:tid 23198] [client 213.139.63.114:44114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||frenchla.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frenchla.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asjgltNpAcTCITK-MoMANwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-10-03 05:24:29
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-29 13:08:19
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-28 10:12:23
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇪🇸
librebit
2026-09-25 16:29:26
UTC ·
(1 month ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-09-24 09:33:52
UTC ·
(1 month ago)
Brute force
Brute-Force
🇺🇸
鬼影233
2026-09-24 05:52:35
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-23 11:14:12
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-22 08:53:09
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-19 15:03:37
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇩🇪
LRob
2026-09-10 23:56:36
UTC ·
(1 month ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /realisation-cuisines/img/realisations/92223/mini/118777561_3285681798193975_4931348196936983082_n_409282.jpg | 2026-09-10 ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /realisation-cuisines/img/realisations/92223/mini/118777561_3285681798193975_4931348196936983082_n_409282.jpg | 2026-09-10 23:56 UTC
show less
Bad Web Bot
