2026-06-17 09:31:55
(2 hours ago)
FortiWeb WAF: 50 attacks detected. Threat Score: 11400. Types: Client Management(25), GEO IP(25). Or ...
show more
FortiWeb WAF: 50 attacks detected. Threat Score: 11400. Types: Client Management(25), GEO IP(25). Origin: Singapore.
show less
Web App Attack
🇦🇺
FireGuard Server
2026-06-16 16:40:09
(19 hours ago)
Blocked by OPNsense firewall; 4 hits, proto=tcp, ports=443
Port Scan
Hacking
🇺🇸
ChamberofCommerce.com
2026-06-16 11:32:32
(1 day ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-15 19:01:53
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 47.79.200.39 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.200.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 15:01:45.421605 2026] [security2:error] [pid 31010:tid 31010] [client 47.79.200.39:32194] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.avaliantlife.com|F|2"] [data ".avaliantlife.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.avaliantlife.com"] [uri "/2013/02/www.avaliantlife.com"] [unique_id "ajBMGTsAxt9bTinykHI3swAAABs"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-15 09:26:46
(2 days ago)
FortiWeb WAF: 34 attacks detected. Threat Score: 13600. Types: Client Management(17), GEO IP(17). Or ...
show more
FortiWeb WAF: 34 attacks detected. Threat Score: 13600. Types: Client Management(17), GEO IP(17). Origin: Singapore.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 02:05:52
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 47.79.200.39 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.200.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:05:48.587412 2026] [security2:error] [pid 23371:tid 23371] [client 47.79.200.39:57696] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.greatwesternfirearms.com|F|2"] [data ".greatwesternfirearms.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.greatwesternfirearms.com"] [uri "/updates/www.greatwesternfirearms.com"] [unique_id "ai9d_MCNS6L4t-y0xD7aZgAAAJQ"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 23:08:33
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 47.79.200.39 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.200.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:08:28.427738 2026] [security2:error] [pid 25471:tid 25471] [client 47.79.200.39:12512] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||soviaenterprises.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "soviaenterprises.com"] [uri "/usoilinc.com"] [unique_id "ai80bKZAhYn2AvLUZ00wxQAAAAY"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
COMPLEX
2026-06-14 14:08:09
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: MANAGED_CHALLENGE
ASN: undefined (u ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: MANAGED_CHALLENGE
ASN: undefined (undefined)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36
show less
Bad Web Bot
🇩🇪
4server
2026-06-14 11:22:35
(3 days ago)
[SunJun1413:22:29.8699262026][security2:error][pid2397644:tid2397766][client47.79.200.39:0]ModSecuri ...
show more
[SunJun1413:22:29.8699262026][security2:error][pid2397644:tid2397766][client47.79.200.39:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".dll\"][severity\"ERROR\"][hostname\"modularss.com\"][uri\"/recordati/nbassembilies/RecNetReg.dll\"][unique_id\"ai6O9RN78kz1JC6M7ycOWAAAAQs\"]\,referer:https://www.google.com/
show less
Port Scan
Brute-Force
Web App Attack
🇫🇷
Sklurk
2026-06-14 01:09:11
(3 days ago)
Web App Attack
Web App Attack
🇺🇸
kosada.com
2026-06-13 10:27:38
(4 days ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
2026-06-13 09:24:02
(4 days ago)
FortiWeb WAF: 46 attacks detected. Threat Score: 17000. Types: Client Management(23), GEO IP(23). Or ...
show more
FortiWeb WAF: 46 attacks detected. Threat Score: 17000. Types: Client Management(23), GEO IP(23). Origin: Singapore.
show less
Web App Attack
🇫🇷
Sklurk
2026-06-12 18:32:01
(4 days ago)
Web App Attack
Web App Attack
🇮🇹
Progetto1
2026-06-12 05:15:02
(5 days ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 04:26:16
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 47.79.200.39 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.200.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 00:26:09.569610 2026] [security2:error] [pid 25561:tid 25561] [client 47.79.200.39:45784] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.beirutbazar.com|F|2"] [data ".awan-tea.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.beirutbazar.com"] [uri "/nstores/awan-tea/www.awan-tea.com"] [unique_id "aiuKYRyZ3vKAzlWW3qCg-gAAAFk"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack