🇩🇪
_ArminS_
2026-07-14 23:38:20
(2 months ago)
WEB-Scan 48724:80 detected 2026.07.15 01:38:20
blocked until 2026.09.02 18:41:07
Port Scan
2026-06-21 18:30:02
(3 months ago)
Malicious activity detected
Hacking
Web App Attack
2026-06-02 10:49:35
(3 months ago)
Malicious activity detected
Hacking
Web App Attack
2026-06-01 09:37:49
(3 months ago)
Malicious activity detected
Hacking
Web App Attack
2026-05-05 03:58:34
(4 months ago)
Malicious activity detected
Hacking
Web App Attack
2026-05-01 21:17:33
(4 months ago)
Malicious activity detected
Hacking
Web App Attack
2026-04-25 06:05:59
(5 months ago)
Web attack
Bad Web Bot
Web App Attack
2026-04-21 05:32:38
(5 months ago)
Malicious activity detected
Hacking
Web App Attack
🇫🇷
polido
2026-04-13 04:08:39
(5 months ago)
Unauthorized connection attempt to port 443 from 47.89.213.80
Port Scan
🇺🇸
TPI-Abuse
2026-04-11 22:39:57
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 47.89.213.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.89.213.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 18:39:51.477533 2026] [security2:error] [pid 2201252:tid 2201252] [client 47.89.213.80:24186] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.djbadger.com|F|2"] [data ".radiosro.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.djbadger.com"] [uri "/radiosro/www.radiosro.com"] [unique_id "adrNt94r_B7Q3E0l5UagigAAAA4"], referer: http://www.djbadger.com/radiosro/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Oakley
2026-04-10 22:38:51
(5 months ago)
(mod_security) mod_security (id:900209) triggered by 47.89.213.80 (US/United States/-): 5 in the las ...
show more
(mod_security) mod_security (id:900209) triggered by 47.89.213.80 (US/United States/-): 5 in the last 900 secs
show less
Web App Attack
Hacking
2026-04-09 13:10:34
(5 months ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-04-09 03:48:55
(5 months ago)
(mod_security) mod_security (id:217210) triggered by 47.89.213.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:217210) triggered by 47.89.213.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 23:48:48.529429 2026] [security2:error] [pid 113286:tid 113286] [client 47.89.213.80:56108] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||www.scoutinsignia.com|F|4"] [data "GET ?C=S;O=A HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.scoutinsignia.com"] [uri "/"] [unique_id "adchoE4XOy89gkg1r8kgDgAAAA0"], referer: http://www.scoutinsignia.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
threewalls.co.uk
2026-04-05 23:03:37
(5 months ago)
Triggered bot honeypot on gclproducts.co.uk
Fraud Orders
FTP Brute-Force
Brute-Force
Exploited Host
🇺🇸
TPI-Abuse
2026-03-31 02:49:36
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 47.89.213.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.89.213.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 22:49:32.052954 2026] [security2:error] [pid 32287:tid 32304] [client 47.89.213.80:33753] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gafm.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gafm.org"] [uri "/http/charteredfinancialmanager.com"] [unique_id "acs2PBeQ1BPLnFjeqwYtvgAAAQ0"], referer: https://www.gafm.org/
show less
Brute-Force
Bad Web Bot
Web App Attack