🇫🇷
IRISIO
2026-03-27 10:37:21
UTC ·
(7 months ago)
scans/SQL injection/spam posts : 3 queries
Web App Attack
SQL Injection
🇫🇷
vtchost.com
2026-03-27 10:26:59
UTC ·
(7 months ago)
ignored robots.txt --\> Zuckerberg being greedy
...
Bad Web Bot
🇮🇱
spd.co.il
2026-03-27 09:01:38
UTC ·
(7 months ago)
Web application attack detected
Hacking
Web App Attack
🇩🇪
Mr-Money
2026-03-27 07:48:12
UTC ·
(7 months ago)
scenario: crowdsecurity/http-path-traversal-probing - events: 4
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-03-27 06:22:32
UTC ·
(7 months ago)
(mod_security) mod_security (id:243420) triggered by 37.27.253.180 (static.180.253.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 02:22:26.400021 2026] [security2:error] [pid 8809: ...
show more
(mod_security) mod_security (id:243420) triggered by 37.27.253.180 (static.180.253.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 02:22:26.400021 2026] [security2:error] [pid 8809:tid 8809] [client 37.27.253.180:59682] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:import" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||fluff.thewaywework.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fluff.thewaywework.com"] [uri "/@fs/etc/passwd"] [unique_id "acYiH7_ostvXzqSqEASYagAAAAI"], referer: https://docs.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-27 05:16:36
UTC ·
(7 months ago)
Mikrotik SYN TCP flood attack
DDoS Attack
Port Scan
Brute-Force
🇳🇱
i-turnradio.nl
2026-03-27 05:06:34
UTC ·
(7 months ago)
2026-03-27 06:06:34 (CET) ~ Blocked by abusescan risk assessment
Web App Attack
🇩🇪
iNetWorker
2026-03-27 03:49:42
UTC ·
(7 months ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
jormaster3k
2026-03-27 02:22:00
UTC ·
(7 months ago)
Attack against Apache (too many 404s)
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 22:01:52
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 37.27.253.180 (static.180.253.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 18:01:46.172435 2026] [security2:error] [pid 11996 ...
show more
(mod_security) mod_security (id:210492) triggered by 37.27.253.180 (static.180.253.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 18:01:46.172435 2026] [security2:error] [pid 11996:tid 11996] [client 37.27.253.180:39606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pelicancovecondo.com"] [uri "/.git/config"] [unique_id "acWsym8BrQhByPjdNguc-AAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 20:14:20
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 37.27.253.180 (static.180.253.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 16:14:13.623588 2026] [security2:error] [pid 20889 ...
show more
(mod_security) mod_security (id:210492) triggered by 37.27.253.180 (static.180.253.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 16:14:13.623588 2026] [security2:error] [pid 20889:tid 20889] [client 37.27.253.180:48096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tudor-harris.com"] [uri "/.git/config"] [unique_id "acWTlQVs-12AlGkzNohJgwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 19:35:07
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 37.27.253.180 (static.180.253.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 15:35:02.436452 2026] [security2:error] [pid 30704 ...
show more
(mod_security) mod_security (id:210492) triggered by 37.27.253.180 (static.180.253.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 15:35:02.436452 2026] [security2:error] [pid 30704:tid 30722] [client 37.27.253.180:52048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cynosurepressurewashing.com"] [uri "/.git/./config"] [unique_id "acWKZvrf7oXeBFK1EqWp1wAAAQ4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-26 17:30:34
UTC ·
(7 months ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
🇮🇩
Burayot
2026-03-26 17:04:52
UTC ·
(7 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 37.27.253.180 (FI/Finland/static.180.253.27.37.clients.your-server.de): 2 in the last 3600 secs
Web App Attack
🇩🇪
paissangroup
2026-03-26 13:55:39
UTC ·
(7 months ago)
Multiple WAF Violations
Web App Attack