🇺🇸
TPI-Abuse
2026-06-11 13:06:03
(12 hours ago)
(mod_security) mod_security (id:210730) triggered by 47.79.201.84 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.201.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 09:05:55.978503 2026] [security2:error] [pid 2835:tid 2835] [client 47.79.201.84:32036] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||koswerks.net|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "koswerks.net"] [uri "/index.bak"] [unique_id "aiqysxQLcrcoOTM_v-GZiQAAAA8"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
FireGuard Server
2026-06-11 12:25:11
(13 hours ago)
Blocked by OPNsense firewall; 4 hits, proto=tcp, ports=443
Port Scan
Hacking
🇩🇪
psauxit
2026-06-11 11:05:33
(14 hours ago)
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ...
show more
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
show less
Web App Attack
Hacking
2026-06-11 10:22:03
(15 hours ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 10:12:49
(15 hours ago)
(mod_security) mod_security (id:210730) triggered by 47.79.201.84 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.201.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 06:12:44.440914 2026] [security2:error] [pid 4476:tid 4476] [client 47.79.201.84:50340] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dannyvanryswyk.com|F|2"] [data ".lastritesgallery.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dannyvanryswyk.com"] [uri "/www.lastritesgallery.com"] [unique_id "aiqKHCnEcdhQtw0fyxeUHgAAABA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-11 09:35:13
(16 hours ago)
FortiWeb WAF: 51 attacks detected. Threat Score: 5200. Types: GEO IP(26), Client Management(25). Ori ...
show more
FortiWeb WAF: 51 attacks detected. Threat Score: 5200. Types: GEO IP(26), Client Management(25). Origin: Singapore.
show less
Web App Attack
🇫🇷
Sklurk
2026-06-11 06:16:33
(19 hours ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 23:18:15
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 47.79.201.84 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.201.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 19:18:11.561912 2026] [security2:error] [pid 14058:tid 14058] [client 47.79.201.84:57962] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dokuzadabirdeniz.com|F|2"] [data ".birikimdergisi.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dokuzadabirdeniz.com"] [uri "/www.birikimdergisi.com"] [unique_id "ainws7POfck0BWMrFjOziQAAAAU"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 17:18:20
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 47.79.201.84 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.201.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 13:18:13.086344 2026] [security2:error] [pid 26512:tid 26512] [client 47.79.201.84:35812] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nrvoutdoors.com|F|2"] [data ".gunauction.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nrvoutdoors.com"] [uri "/TAMBOUR SAFETY/www.gunauction.com"] [unique_id "aimcVcwRuryZAZ3lpfW4fgAAABY"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-05-02 08:37:12
(1 month ago)
Brute force
Brute-Force
🇩🇪
stinpriza
2026-04-08 13:14:07
(2 months ago)
Web App Attack
Web App Attack
🇺🇸
gui-ying233
2026-03-29 02:24:20
(2 months ago)
Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Sa ...
show more
Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36
show less
Bad Web Bot
🇺🇸
gui-ying233
2026-03-29 02:03:06
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
ersei.net
2026-01-15 19:39:28
(4 months ago)
Nonstop scanning with no cooldown or respect for 429.
Bad Web Bot
🇮🇹
VHosting
2026-01-08 11:36:20
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH