🇩🇪
HandyTreff.de
2026-04-14 14:26:09
(6 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -35.791 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -35.791 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa
show less
Web App Attack
Bad Web Bot
🇫🇷
bigorre.org
2026-04-05 05:04:18
(6 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-24 13:12:16
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 240d:c010:178:2::18 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 240d:c010:178:2::18 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 09:12:08.395806 2026] [security2:error] [pid 3346:tid 3346] [client 240d:c010:178:2::18:35373] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.garyandthegroove.com|F|2"] [data ".barebonesgrill.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.garyandthegroove.com"] [uri "/www.barebonesgrill.com"] [unique_id "acKNqH_mt906VUiBz9nOsgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 23:29:12
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 240d:c010:178:2::18 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 240d:c010:178:2::18 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 19:29:05.318766 2026] [security2:error] [pid 21219:tid 21219] [client 240d:c010:178:2::18:46934] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.instituteofscience.com|F|2"] [data ".instituteofscience.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.instituteofscience.com"] [uri "/www.instituteofscience.com"] [unique_id "ab8pwe4b7ZEy36usKQ7HbAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 21:52:58
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 240d:c010:178:2::18 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 240d:c010:178:2::18 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 17:52:52.866751 2026] [security2:error] [pid 5271:tid 5294] [client 240d:c010:178:2::18:51031] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.aafm.org|F|2"] [data ".gafm.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.aafm.org"] [uri "/www.GAFM.com"] [unique_id "ab8TNPbOXdnVPsBlnEYQDQAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
stechusa
2026-03-20 06:08:53
(6 months ago)
[Askari] ELEVATED_THREAT | country=SG | ASN=ACE | AbuseIPDB=12% | 210 IPs targeting /brand/satco-pro ...
show more
[Askari] ELEVATED_THREAT | country=SG | ASN=ACE | AbuseIPDB=12% | 210 IPs targeting /brand/satco-products-inc.html | Facet request during elevated threat (facet_ratio=0.94, unique_ips=749) | URL template shared by 106 IPs: /brand.html?bulb_shape=*&bulb_shape_type=*&bulb_type=*&mode=list&p=* | Signals: path_concentration, datacenter_ip, facet_param_template, suspicious_first_request, non_target_geo
show less
Web App Attack
Hacking
Web Spam
🇺🇸
stechusa
2026-03-20 06:08:53
(6 months ago)
ELEVATED_THREAT | country=SG | ASN=ACE | AbuseIPDB=12% | 210 IPs targeting /brand/satco-products-inc ...
show more
ELEVATED_THREAT | country=SG | ASN=ACE | AbuseIPDB=12% | 210 IPs targeting /brand/satco-products-inc.html | Facet request during elevated threat (facet_ratio=0.94, unique_ips=749) | URL template shared by 106 IPs: /brand.html?bulb_shape=*&bulb_shape_type=*&bulb_type=*&mode=list&p=*
show less
Web App Attack
Hacking
Web Spam
🇺🇸
TPI-Abuse
2026-03-14 11:55:29
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 240d:c010:178:2::18 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 240d:c010:178:2::18 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 07:55:25.398716 2026] [security2:error] [pid 20147:tid 20147] [client 240d:c010:178:2::18:58018] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.tribwatch.com|F|2"] [data ".free-coat- of-arms.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.tribwatch.com"] [uri "/up/www.free-coat- of-arms.com"] [unique_id "abVMrWzJoH3Mll7xdaWDwAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 01:00:38
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 240d:c010:178:2::18 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 240d:c010:178:2::18 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 21:00:31.692285 2026] [security2:error] [pid 28088:tid 28088] [client 240d:c010:178:2::18:42249] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||phantomkennels.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phantomkennels.com"] [uri "/phantomkennels.com"] [unique_id "abSzL4x7HEoZe3AWeoyMygAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-02-22 04:23:31
(7 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -28.56 (Bad < -10 / Very Bad < -20 / ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -28.56 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Sa
show less
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-03 07:28:23
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 240d:c010:178:2::18 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 240d:c010:178:2::18 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 02:28:17.799226 2025] [security2:error] [pid 840:tid 840] [client 240d:c010:178:2::18:35976] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pinetreedistrict.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pinetreedistrict.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aS_mkQXBsXAW-o4DPHPuiwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack