๐บ๐ธ
TPI-Abuse
2026-10-16 12:08:38
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:1f:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:1f:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:08:33.011808 2026] [security2:error] [pid 18667:tid 18667] [client 2a03:2880:f800:1f:::46850] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nesetsv.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nesetsv.com"] [uri "/nesetsv.com"] [unique_id "atITwYyzi0eb99IHObbcmQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
sefinek.net
2026-10-16 08:42:15
(5 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoin ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /booru | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ซ๐ท
abuseipdb.amaze321
2026-10-14 15:33:35
(1 day ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-14 01:35:39
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:1f:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:1f:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 21:35:33.598156 2026] [security2:error] [pid 4498:tid 4498] [client 2a03:2880:f800:1f:::23574] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.intrinsicdiscovery.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.intrinsicdiscovery.com"] [uri "/intrinsicdiscovery.com"] [unique_id "as7cZZvuf47_A10c6kVJGQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 07:10:10
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:1f:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:1f:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 03:10:00.663260 2026] [security2:error] [pid 7920:tid 7920] [client 2a03:2880:f800:1f:::28768] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rockwaychiropractic.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rockwaychiropractic.com"] [uri "/rockwaychiropractic.com"] [unique_id "asyHyN85SNy1VpIelLOX5gAAAD8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
hermawan
2026-10-12 04:09:18
(4 days ago)
[Mon Oct 12 11:09:17.230668 2026] [security2:error] [pid 1793827:tid 140630101477056] [client 2a03:2 ...
show more
[Mon Oct 12 11:09:17.230668 2026] [security2:error] [pid 1793827:tid 140630101477056] [client 2a03:2880:f800:1f:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/informasi-iklim/perubahan-iklim/555561307-infografis-perubahan-iklim-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/perubahan-iklim/555561307-infografis-perubahan-iklim-jawa-timur"] [unique_id "asxdbRgdYWUoUOs824uefAAAAME"] [st
...
show less
Email Spam
Hacking
๐ต๐ฑ
mscode.pl
2026-10-11 00:33:18
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 32934 (Facebook, Inc.)
P ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 32934 (Facebook, Inc.)
Protocol: HTTP/2 (GET method)
Zone: r2.selify.io
Endpoint: /
UA: facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)
show less
Bad Web Bot
๐ต๐ฑ
mscode.pl
2026-10-09 18:33:29
(6 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 32934 (Facebook, Inc.)
P ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 32934 (Facebook, Inc.)
Protocol: HTTP/2 (GET method)
Zone: r2.selify.io
Endpoint: /
UA: facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)
show less
Bad Web Bot
๐ฉ๐ช
jbcrn
2026-10-09 04:58:41
(1 week ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Facebook, ruleset: ai.robots.txt. Reque ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Facebook, ruleset: ai.robots.txt. Requested honeypot path: /. User-Agent: facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Entalpi.net
2026-10-07 19:30:55
(1 week ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
๐ฌ๐ง
relianoid.com
2026-10-04 10:14:56
(1 week ago)
404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web App Attack
๐ฌ๐ง
venus.launch.bz
2026-10-02 23:35:15
(1 week ago)
(wpscan) WordPress probe detected from 2a03:2880:f800:1f:: (Unknown)
Hacking
๐ฌ๐ง
relianoid.com
2026-10-02 20:05:31
(1 week ago)
404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web App Attack
๐ณ๐ฑ
thedreamer.nl
2026-10-01 20:56:28
(2 weeks ago)
2a03:2880:f800:1f:: - - [01/Oct/2026:22:25:09 +0200] "GET /CCOSTAN/Home-AssistantConfig/index.php?pa ...
show more
2a03:2880:f800:1f:: - - [01/Oct/2026:22:25:09 +0200] "GET /CCOSTAN/Home-AssistantConfig/index.php?page=87 HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" "US" "Ashburn" "39.04690" "-77.49030"
2a03:2880:f800:1f:: - - [01/Oct/2026:22:54:15 +0200] "GET /CCOSTAN/Home-AssistantConfig/index.php?page=43 HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" "US" "Ashburn" "39.04690" "-77.49030"
...
show less
Brute-Force
Bad Web Bot
๐ณ๐ฑ
thedreamer.nl
2026-10-01 20:27:17
(2 weeks ago)
2a03:2880:f800:1f:: - - [01/Oct/2026:20:46:49 +0200] "GET /CCOSTAN/Home-AssistantConfig/index.php?pa ...
show more
2a03:2880:f800:1f:: - - [01/Oct/2026:20:46:49 +0200] "GET /CCOSTAN/Home-AssistantConfig/index.php?page=22 HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" "US" "Ashburn" "39.04690" "-77.49030"
2a03:2880:f800:1f:: - - [01/Oct/2026:22:25:04 +0200] "GET /vuln/product/37705/hashicorpterraform_provider/index.php?page=45 HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" "US" "Ashburn" "39.04690" "-77.49030"
2a03:2880:f800:1f:: - - [01/Oct/2026:22:25:04 +0200] "GET /vuln/product/37705/hashicorpterraform_provider/index.php?page=45 HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l
...
show less
Brute-Force
Bad Web Bot