|
🇧🇷
hostmach
|
|
backup_logs.sh; Ports: CSI; Direction: acctinfo; Trigger: cpanel_profile; Logs: cpanel3-skel
|
Port Scan
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 47.128.35.58 (ec2-47-128-35-58.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.35.58 (ec2-47-128-35-58.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 07:10:25.707709 2026] [security2:error] [pid 1461:tid 1461] [client 47.128.35.58:20378] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||wmionline.org|F|2"] [data ".wordpress.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wmionline.org"] [uri "/wmionline.wordpress.com"] [unique_id "aa_8IaM8F2vhFxHHfmwApQAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 47.128.35.58 (ec2-47-128-35-58.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 47.128.35.58 (ec2-47-128-35-58.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 14:41:14.389231 2026] [security2:error] [pid 8318:tid 8318] [client 47.128.35.58:42094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stuartpearson.net"] [uri "/.htpasswds/"] [unique_id "aac5Wn2LiHI3CoCFMxN0ZwAAAB8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
strzonnek
|
|
attack on webform
|
Brute-Force
Web App Attack
|
|
|
🇨🇭
backslash
|
|
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
|
Bad Web Bot
|
|
|
🇨🇦
1gz
|
|
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /include/lajme5fund.php
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 47.128.35.58 (ec2-47-128-35-58.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 47.128.35.58 (ec2-47-128-35-58.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 20:07:36.111048 2026] [security2:error] [pid 21250:tid 21250] [client 47.128.35.58:24676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.heuristicbooks.com"] [uri "/Heuristic%20Books%20--%20Algorithms%20for%20Better%20Living_files/ccx/"] [unique_id "aZZiWBFXAcTbhM11AfcDNgAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇫🇷
bigorre.org
|
|
Excessive crawling : exceed crawl-delay defined in robots.txt
|
Bad Web Bot
|
|
|
🇫🇷
bigorre.org
|
|
Excessive crawling : exceed crawl-delay defined in robots.txt
|
Bad Web Bot
|
|
|
🇪🇸
librebit
|
|
Brute force
|
Brute-Force
|
|
|
🇫🇷
bigorre.org
|
|
Excessive crawling : exceed crawl-delay defined in robots.txt
|
Bad Web Bot
|
|
|
🇨🇦
1gz
|
|
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/pa-ngrene-mengjes/
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
|
🇫🇷
mrcrassi
|
|
Triggered Cloudflare WAF (botFight) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET m ...
show more
Triggered Cloudflare WAF (botFight) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
|
Anonymous
|
|
Malicious activity detected
|
Hacking
Web App Attack
|
|
|
🇩🇪
conseilgouz
|
|
doe-24 : CGSECURE_MSG_24=>/robots.txt(Bytespider)
|
Hacking
|
|