2026-06-12 09:21:02
(2 hours ago)
FortiWeb WAF: 90 attacks detected. Threat Score: 13200. Types: Client Management(45), GEO IP(45). Or ...
show more
FortiWeb WAF: 90 attacks detected. Threat Score: 13200. Types: Client Management(45), GEO IP(45). Origin: Singapore.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 06:01:43
(5 hours ago)
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 02:01:36.587024 2026] [security2:error] [pid 7342:tid 7342] [client 47.79.200.118:27086] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||asbechiro.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "asbechiro.com"] [uri "/yahoo.com"] [unique_id "aiugwN0bOkJ08zpG1hB0VQAAAAc"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 05:00:41
(6 hours ago)
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 01:00:37.086867 2026] [security2:error] [pid 17278:tid 17278] [client 47.79.200.118:3578] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.register-yacht-langkawi.com|F|2"] [data ".register-yacht-langkawi.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.register-yacht-langkawi.com"] [uri "/it/www.register-yacht-langkawi.com"] [unique_id "aiuSdYDUUMYHVR42TEJWdAAAAAM"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-06-12 01:26:49
(9 hours ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 16:25:39
(18 hours ago)
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 12:25:34.319530 2026] [security2:error] [pid 21728:tid 21728] [client 47.79.200.118:10810] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.elcalamo.com|F|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.elcalamo.com"] [uri "/pda/medina-azucarlimpio.PDB"] [unique_id "airhfsxq_WgL8i1MUWgXWAAAABs"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 06:03:09
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 02:03:05.581107 2026] [security2:error] [pid 21169:tid 21169] [client 47.79.200.118:8718] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.steinmetzjewelers.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.steinmetzjewelers.com"] [uri "/alsetsystems.com"] [unique_id "aipPmVpRvX9ohUMr1mO1lQAAAAI"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-11 02:32:32
(1 day ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 02:17:29
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 22:17:22.213742 2026] [security2:error] [pid 27034:tid 27034] [client 47.79.200.118:2864] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.avaliantlife.com|F|2"] [data ".avaliantlife.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.avaliantlife.com"] [uri "/2013/03/www.avaliantlife.com"] [unique_id "aioaso4LY97zCxbqFJntzQAAABk"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 22:05:08
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 18:05:01.199191 2026] [security2:error] [pid 3546:tid 3546] [client 47.79.200.118:28090] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||comics.flyingdodostudio.com|F|2"] [data ".tumblr.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "comics.flyingdodostudio.com"] [uri "/bubbles/inkyphalangies.tumblr.com"] [unique_id "ainfjXItRyrchjwjNuWDGAAAAAM"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 19:01:37
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.200.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 15:01:31.938815 2026] [security2:error] [pid 22350:tid 22350] [client 47.79.200.118:40182] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.localpetsitters.com|F|2"] [data ".egahvets.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.localpetsitters.com"] [uri "/about-2/resources/www.egahvets.com"] [unique_id "aim0ixpwq0etnd_b3DzIDAAAAAM"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ersei.net
2026-05-14 07:00:36
(4 weeks ago)
Web app exploiting
Web App Attack
🇺🇸
ersei.net
2026-05-11 09:31:08
(1 month ago)
Web app exploiting
Web App Attack
🇺🇸
gui-ying233
2026-03-29 01:50:24
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
gui-ying233
2026-03-08 09:03:41
(3 months ago)
Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Sa ...
show more
Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36
show less
Bad Web Bot
🇺🇸
ersei.net
2026-01-29 19:40:54
(4 months ago)
Web app exploiting
Web App Attack