🇺🇸
TPI-Abuse
2026-09-12 03:07:58
(3 hours ago)
(mod_security) mod_security (id:210730) triggered by 47.79.206.189 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.206.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 23:07:49.972081 2026] [security2:error] [pid 8385:tid 8385] [client 47.79.206.189:64980] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.puckerbikinis.com|F|2"] [data ".puckerbikinis.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.puckerbikinis.com"] [uri "/pucker-bikinis-2/16/www.puckerbikinis.com"] [unique_id "aqTCBbkWZ44rSJVkR-RQfwAAAAo"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-11 13:02:25
(18 hours ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /2024/04 | 2026-09-11 13:02 UTC
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-11 12:02:52
(19 hours ago)
(mod_security) mod_security (id:210730) triggered by 47.79.206.189 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.206.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 08:02:48.339815 2026] [security2:error] [pid 23619:tid 23619] [client 47.79.206.189:27576] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.miranda-race-walks.com|F|2"] [data ".mariamichta.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.miranda-race-walks.com"] [uri "/Pages/www.mariamichta.com"] [unique_id "aqPt6PwI0EFhxxKCVX2QbwAAAAQ"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 15:17:39
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 47.79.206.189 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.206.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 11:17:34.474569 2026] [security2:error] [pid 15804:tid 15804] [client 47.79.206.189:17812] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||home.agingworkforcenews.com|F|2"] [data ".agingworkforcenews.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "home.agingworkforcenews.com"] [uri "/www.agingworkforcenews.com"] [unique_id "aqLKDqlHIiPenF3rv5HuNAAAAAA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-09-10 06:07:03
(2 days ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 65>=65, Abuse 60, NonEU, first-seen)
show less
Hacking
Exploited Host
Web App Attack
🇩🇪
LRob
2026-09-10 03:06:27
(2 days ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /tour-dhorizon-des-regles-antiques-et-medievales | 2026-09-10 03:06 UTC
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-09 17:00:34
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 47.79.206.189 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.206.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 13:00:31.097185 2026] [security2:error] [pid 3312:tid 3312] [client 47.79.206.189:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.swarnar.com|F|2"] [data ".thenation.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.swarnar.com"] [uri "/www.thenation.com"] [unique_id "aqGQr5uoTy8UAI9PZVRarwAAACE"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-09-09 08:10:06
(2 days ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /creations/website/communaute-gamer-mesnie-org-premier-site-web | 2026-09-09 08:10 UTC
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-09 00:13:40
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 47.79.206.189 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.206.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 20:13:35.825641 2026] [security2:error] [pid 30081:tid 30111] [client 47.79.206.189:54896] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stoborough.org|F|2"] [data ".mentzlaw.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stoborough.org"] [uri "/www.MentzLaw.com"] [unique_id "aqCkr9N10R2ZGoZKbcwqvwAAANU"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 02:03:08
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 47.79.206.189 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.206.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 22:03:02.071855 2026] [security2:error] [pid 30321:tid 30321] [client 47.79.206.189:33650] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.tulsatvmemories.com|F|2"] [data ".startickets.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.tulsatvmemories.com"] [uri "/www.startickets.com"] [unique_id "ap9s1lipFMlTtSCy-0mq-AAAABU"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
jbcrn
2026-09-06 14:01:49
(5 days ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /deflagration.coating. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
🇩🇪
jbcrn
2026-09-03 11:10:33
(1 week ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /woodsilver-attunely. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
🇳🇴
tmiland
2026-09-02 11:00:20
(1 week ago)
Detected 34 connections from 47.79.206.189 last 60 minutes.; 47.79.206.189 is part of network 47.0.0 ...
show more
Detected 34 connections from 47.79.206.189 last 60 minutes.; 47.79.206.189 is part of network 47.0.0.0 with 192356 total distributed connections; Logs: 47.79.206.189 - - [02/Sep/2026:00:00:30 +0200] "GET /preferences?referer=/watch?v=lkx6wFMe2pE HTTP/1.1" 200 6368 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Mobile Safari/537.36" 47.79.206.189 - - [02/Sep/2026:00:01:58 +0200] "HEAD /hashtag/livedohorinepal HTTP/1.1" 200 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 47.79.206.189 - - [02/Sep/2026:00:02:07 +0200] "GET /hashtag/livedohorinepal HTTP/1.1" 200 3171 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36" 47.79.206.189 - - [02/Sep/2026:00:02:13 +0200] "GET /watch?listen=true&v=DuI7XEy119Y HTTP/1.1" 500 1571 "https://www.google.com/
show less
DDoS Attack
Bad Web Bot
Web App Attack
🇳🇴
tmiland
2026-09-02 10:30:41
(1 week ago)
Detected 35 connections from 47.79.206.189 last 60 minutes.; 47.79.206.189 is part of network 47.0.0 ...
show more
Detected 35 connections from 47.79.206.189 last 60 minutes.; 47.79.206.189 is part of network 47.0.0.0 with 192276 total distributed connections; Logs: 47.79.206.189 - - [02/Sep/2026:00:00:30 +0200] "GET /preferences?referer=/watch?v=lkx6wFMe2pE HTTP/1.1" 200 6368 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Mobile Safari/537.36" 47.79.206.189 - - [02/Sep/2026:00:01:58 +0200] "HEAD /hashtag/livedohorinepal HTTP/1.1" 200 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 47.79.206.189 - - [02/Sep/2026:00:02:07 +0200] "GET /hashtag/livedohorinepal HTTP/1.1" 200 3171 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36" 47.79.206.189 - - [02/Sep/2026:00:02:13 +0200] "GET /watch?listen=true&v=DuI7XEy119Y HTTP/1.1" 500 1571 "https://www.google.com/
show less
DDoS Attack
Bad Web Bot
Web App Attack
🇨🇭
flaus
2026-09-02 05:05:55
(1 week ago)
$f2bV_matches
Hacking
Bad Web Bot
Web App Attack
