🇳🇱
Roderic
2025-05-12 23:12:50
(1 year ago)
(PERMBLOCK) 52.90.180.86 (US/United States/Virginia/Ashburn/ec2-52-90-180-86.compute-1.amazonaws.com ...
show more
(PERMBLOCK) 52.90.180.86 (US/United States/Virginia/Ashburn/ec2-52-90-180-86.compute-1.amazonaws.com/[redacted]) has had more than 4 temp blocks
show less
Hacking
🇳🇱
Roderic
2025-05-12 05:33:11
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇳🇱
Roderic
2025-05-10 04:53:14
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇳🇱
xyz.rip
2025-05-08 06:44:10
(1 year ago)
Mutliple rate-limit violations...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-08 01:24:11
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 52.90.180.86 (ec2-52-90-180-86.compute-1.amazon ...
show more
(mod_security) mod_security (id:210730) triggered by 52.90.180.86 (ec2-52-90-180-86.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 21:24:06.071361 2025] [security2:error] [pid 3106479:tid 3106479] [client 52.90.180.86:37832] [client 52.90.180.86] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.stragar.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.stragar.com"] [uri "/[email protected] "] [unique_id "aBwHtk2ZkvKVll91ttvfOgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2025-05-07 14:16:34
(1 year ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇩🇪
psauxit
2025-05-06 23:52:28
(1 year ago)
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ...
show more
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
show less
Hacking
Web App Attack
🇳🇱
xyz.rip
2025-05-06 13:41:26
(1 year ago)
Mutliple rate-limit violations...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-06 09:13:56
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 52.90.180.86 (ec2-52-90-180-86.compute-1.amazon ...
show more
(mod_security) mod_security (id:210730) triggered by 52.90.180.86 (ec2-52-90-180-86.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 05:13:50.222780 2025] [security2:error] [pid 2268039:tid 2268039] [client 52.90.180.86:42976] [client 52.90.180.86] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.solcargomiami.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.solcargomiami.com"] [uri "/mailto@[email protected] "] [unique_id "aBnSzrwwJt1nnCczPW2yJgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-05-06 05:18:30
(1 year ago)
PSCDE WEBFORM SPAM 52.90.180.86 (ec2-52-90-180-86.compute-1.amazonaws.com)
Web Spam
🇦🇺
MAGIC
2025-05-05 15:19:31
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-05-05 13:52:08
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 52.90.180.86 (ec2-52-90-180-86.compute-1.amazon ...
show more
(mod_security) mod_security (id:210730) triggered by 52.90.180.86 (ec2-52-90-180-86.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 05 09:52:04.084145 2025] [security2:error] [pid 2783160:tid 2783160] [client 52.90.180.86:55646] [client 52.90.180.86] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.stalbansparish.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.stalbansparish.org"] [uri "/news-and-information/[email protected] "] [unique_id "aBjChJyjSy-GNZeNtiLXrAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-05 13:26:42
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 52.90.180.86 (ec2-52-90-180-86.compute-1.amazon ...
show more
(mod_security) mod_security (id:210730) triggered by 52.90.180.86 (ec2-52-90-180-86.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 05 09:26:39.387237 2025] [security2:error] [pid 775983:tid 775983] [client 52.90.180.86:51748] [client 52.90.180.86] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.photojeniq.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.photojeniq.com"] [uri "/photovelvet/Thumbs.db"] [unique_id "aBi8jyo7SONB5Greg3zEEgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2025-05-05 00:05:08
(1 year ago)
Too many Status 40X (20)
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2025-05-04 08:14:15
(1 year ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack