🇺🇸
TPI-Abuse
2026-07-03 22:23:21
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 31.134.8.234 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 31.134.8.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 18:23:13.427143 2026] [security2:error] [pid 8288:tid 8288] [client 31.134.8.234:30843] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Cinna 8028/Thumbs.db"] [unique_id "akg2UbTecXltB8bOe3V_-wAAAA8"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Cinna%208028/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
MusicLibrary
2026-06-29 07:55:24
(1 week ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇦🇺
MAGIC
2026-06-26 07:00:26
(2 weeks ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇸🇪
SkyDancer
2026-06-20 01:36:04
(3 weeks ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-06-03 07:14:14
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 31.134.8.234 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 31.134.8.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 03:14:10.328930 2026] [security2:error] [pid 1476:tid 1476] [client 31.134.8.234:47093] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Steelcase/pics/STLC-674791/Thumbs.db"] [unique_id "ah_UQsl6-5VqhKj5YKnSWwAAAAs"], referer: https://vitalitywebb.com/backstore/Steelcase/pics/STLC-674791/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-05-21 03:23:14
(1 month ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -54.441 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -54.441 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.316.14
show less
Web App Attack
Bad Web Bot
🇨🇿
ptlab
2026-04-26 10:45:26
(2 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇨🇭
backslash
2026-04-17 00:09:50
(2 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-13 04:49:55
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 31.134.8.234 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.8.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 00:49:48.604927 2026] [security2:error] [pid 698857:tid 698857] [client 31.134.8.234:14405] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||laboquimia.es|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "laboquimia.es"] [uri "/wp-json/wp/v2/users"] [unique_id "adx17IBplIZNvvp1p6kA-QAAACA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
Cognisant-Security
2026-04-04 09:55:00
(3 months ago)
Attempts to login WordPress with invalid user credentials
Web App Attack
Hacking
🇩🇪
Hazzard
2026-04-02 06:13:36
(3 months ago)
(wordpress) Failed wordpress login from 31.134.8.234 (SC/Seychelles/-/-/-/[redacted]): (CF_ENABLE)
Brute-Force
🇨🇦
SSH-Admin
2026-02-07 17:12:28
(5 months ago)
Probing for Exploits
Exploited Host
Web App Attack
2026-02-05 12:55:35
(5 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇭
backslash
2026-02-03 23:00:16
(5 months ago)
block ruleset 486D2EE5E731CC049D1E480D68D04DFFE28AADF1
Bad Web Bot
2026-01-29 19:19:07
(5 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.29 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.29 is noted in report timestamp
show less
Hacking
Brute-Force