🇮🇹
Progetto1
2026-10-23 05:05:03
(10 hours ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 19:49:26
(19 hours ago)
(mod_security) mod_security (id:210730) triggered by 31.76.60.157 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 31.76.60.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 15:49:19.898651 2026] [security2:error] [pid 24788:tid 24788] [client 31.76.60.157:40452] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cameronsol.com|F|2"] [data ".camerongunsmith.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cameronsol.com"] [uri "/www.camerongunsmith.com"] [unique_id "atpovy_E3VNfJAbcm08fowAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-19 23:29:00
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dont-eat-the-pudding.top | URI: /wp-admin/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇷
Flo Flo
2026-10-18 23:18:34
(4 days ago)
31.76.60.157 - - - [19/Oct/2026:01:18:34 +0200] "flad.xyz" "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 ( ...
show more
31.76.60.157 - - - [19/Oct/2026:01:18:34 +0200] "flad.xyz" "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 0.000
...
show less
Web App Attack
🇩🇪
expandmade.com
2026-10-16 00:52:57
(1 week ago)
detect header anomalies [16/Oct/2026:00:52:56 "GET /brauerei-museum-dortmund-dortmunder-export"]
Web App Attack
🇺🇸
Actors.Bible
2026-10-14 03:17:59
(1 week ago)
Abusive web crawler. 8 requests to 8 unique paths in 1301 milliseconds.
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-13 23:15:54
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 31.76.60.157 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.76.60.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:15:48.031598 2026] [security2:error] [pid 24286:tid 24286] [client 31.76.60.157:34742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cinesonline.com"] [uri "/wp-config.php"] [unique_id "as67pPj4bi4wcoP_mYzi6QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Ike57
2026-10-12 22:27:47
(1 week ago)
Detected activity: Proxycheck.io Risk score: 33%; Multiple WAF violations; Abuse Confidence score ov ...
show more
Detected activity: Proxycheck.io Risk score: 33%; Multiple WAF violations; Abuse Confidence score over set treshold; Blocked by web application firewall; Datacenter IP detected | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 23:04:30
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 31.76.60.157 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 31.76.60.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 19:04:23.390593 2026] [security2:error] [pid 25818:tid 25818] [client 31.76.60.157:46976] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||spaceritual.net|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "spaceritual.net"] [uri "/index.old"] [unique_id "aswV90z7IXatihIIKlweugAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-11 01:21:30
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: definitelynotahoneypot.xyz | URI: /wp-admin/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
2026-10-07 22:20:02
(2 weeks ago)
Malicious activity detected
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-07 05:41:57
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.xyz | URI: /wp-admin/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 05:51:49
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 31.76.60.157 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 31.76.60.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 01:51:39.986192 2026] [security2:error] [pid 30239:tid 30239] [client 31.76.60.157:44936] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||genesis-castle.com|F|2"] [data ".ini.ea3.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "genesis-castle.com"] [uri "/php.ini.ea3.bak"] [unique_id "asSMay3KHZkfBknX7bdksAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-05 06:09:01
(2 weeks ago)
Malicious activity detected
Hacking
Web App Attack
🇦🇺
FireGuard Server
2026-10-04 02:55:08
(2 weeks ago)
Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=80
Port Scan
Hacking