🇺🇸
TPI-Abuse
2026-04-02 01:28:00
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 47.79.204.156 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.204.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 21:27:53.325595 2026] [security2:error] [pid 31413:tid 31413] [client 47.79.204.156:50674] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.beirutbazar.com|F|2"] [data ".beirutbazar.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.beirutbazar.com"] [uri "/item/fine-wool-lbp-1275000-usd-850/www.beirutbazar.com"] [unique_id "ac3GGfDgBuRSZC66zdfFigAAAAk"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-04-02 01:26:42
(2 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-01-20 05:13:51
(4 months ago)
Brute force
Brute-Force
🇮🇹
VHosting
2026-01-08 11:36:22
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
🇺🇸
kosada.com
2026-01-05 16:06:51
(5 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2025-12-26 23:20:50
(5 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇫🇷
Sklurk
2025-12-06 05:12:34
(6 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2025-12-04 13:38:04
(6 months ago)
Web App Attack
Web App Attack
2025-11-22 03:09:34
(6 months ago)
wordpress-trap
Web App Attack
🇺🇸
ChamberofCommerce.com
2025-10-21 09:22:30
(7 months ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot
🇦🇺
advena
2025-08-25 18:15:55
(9 months ago)
47.79.204.156 (AS45102 ALIBABA-CN-NET Alibaba US Technology Co., Ltd.) was intercepted at 2025-08-25 ...
show more
47.79.204.156 (AS45102 ALIBABA-CN-NET Alibaba US Technology Co., Ltd.) was intercepted at 2025-08-25T18:12:44Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge.
show less
Web Spam
Hacking
Brute-Force
Web App Attack
🇺🇸
Cynosphere
2025-08-20 19:10:43
(9 months ago)
Attempts to scrape tweet pathnames, always Referer: google.com and User-Agent: Mozilla/5.0 (Linux; A ...
show more
Attempts to scrape tweet pathnames, always Referer: google.com and User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Mobile Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇳🇱
exxos
2025-08-05 02:10:01
(10 months ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-07-30 02:37:51
(10 months ago)
HTTP1.x attacks
DDoS Attack
🇺🇸
TPI-Abuse
2025-07-11 21:45:05
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 47.79.204.156 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.204.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 17:44:55.972085 2025] [security2:error] [pid 31412:tid 31412] [client 47.79.204.156:65519] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vangentholding.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vangentholding.com"] [uri "/tag/rapid-weight-loss/ketoblastpills.com"] [unique_id "aHGF1w_6tpoxK3hBCHELdAAAAAo"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack