|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 47.82.49.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:02:22.082268 2026] [security2:error] [pid 19718:tid 19718] [client 47.82.49.172:42150] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 47.82.49.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:02:22.082268 2026] [security2:error] [pid 19718:tid 19718] [client 47.82.49.172:42150] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||williamfitzsimmons.com|F|2"] [data ".williamfitzsimmons.tix.musictoday.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "williamfitzsimmons.com"] [uri "/news/0410-william-fitzsimmons-spring-tour-update/www.williamfitzsimmons.tix.musictoday.com"] [unique_id "au4WLvu9MJ9P4G58PLnwDQAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇺
aranguren.org
|
|
47.82.49.172 - - [05/Nov/2026:07:08:08 +1100] "GET /squid-reports/2026Apr20-2026Apr26/2a06_4882_5000_60/graph.html HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/5 ...
show more
47.82.49.172 - - [05/Nov/2026:07:08:08 +1100] "GET /squid-reports/2026Apr20-2026Apr26/2a06_4882_5000_60/graph.html HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
47.82.49.172 - - [05/Nov/2026:14:13:11 +1100] "GET /squid-reports/2025Oct27-2025Oct28/185_177_238_26/graph.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
47.82.49.172 - - [05/Nov/2026:17:26:29 +1100] "GET /squid-reports/2026May18-2026May24/2a06_4882_3000_49/graph.html HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
|
|
🇫🇷
Entalpi.net
|
|
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
|
Bad Web Bot
|
|
🇩🇪
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
|
Exploited Host
Web App Attack
|
|
🇨🇦
soundboxxx.com
|
|
47.82.49.172 X 1
|
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
|
|
🇩🇪
klaus_ph
|
|
[Thu Oct 29 02:47:50.538873 2026] [ssl:info] [pid 1666607] [client 47.82.49.172:48146] AH01964: Connection to child 23 established (server fit.vufindnet.de:443)
...
|
Hacking
|
|
🇨🇦
soundboxxx.com
|
|
47.82.49.172 X 4
|
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
|
|
🇨🇦
soundboxxx.com
|
|
47.82.49.172 X 16
|
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
|
|
🇨🇦
soundboxxx.com
|
|
47.82.49.172 X 2
|
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
|
|
🇵🇱
Budyn
|
|
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: pma.sweetpuddingtrap.xyz | URI: /backup.sql | UA: ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: pma.sweetpuddingtrap.xyz | URI: /backup.sql | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
Vegascosmetics
|
|
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de17848Geral/ChangeCountry)
|
Hacking
Bad Web Bot
Web App Attack
|
|
🇩🇪
klaus_ph
|
|
47.82.49.172 - - [18/Aug/2026:15:19:38 +0200] "GET /gnd/Record/13501705X/Description?lng=gl HTTP/1.1" 200 12347 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
...
|
Bad Web Bot
|
|
🇫🇷
Entalpi.net
|
|
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
|
Bad Web Bot
|
|
🇷🇺
Mga Admin
|
|
47.82.49.172 - - [31/Jul/2026:11:20:00 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs141474210 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs141474210" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K ...
show more
47.82.49.172 - - [31/Jul/2026:11:20:00 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs141474210 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs141474210" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇷🇺
Mga Admin
|
|
47.82.49.172 - - [25/Jul/2026:10:30:15 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs875564 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs875564" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ...
show more
47.82.49.172 - - [25/Jul/2026:10:30:15 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs875564 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs875564" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
