🇬🇧
NotCool
2026-09-23 15:50:00
(2 hours ago)
(CRAWLDELAY) Generic Bot Crawl-delay Violation 54.172.198.37 (US/United States/ec2-54-172-198-37.com ...
show more
(CRAWLDELAY) Generic Bot Crawl-delay Violation 54.172.198.37 (US/United States/ec2-54-172-198-37.compute-1.amazonaws.com): 50 in the last 3600 secs
show less
Bad Web Bot
🇺🇸
cyfordtechnologies.com
2026-09-23 13:15:19
(5 hours ago)
Non-human high traffic: 8/7 : Reported by Cyford API
DDoS Attack
🇫🇷
Sklurk
2026-09-23 11:49:37
(6 hours ago)
Web App Attack
Web App Attack
🇪🇸
Michael McCarthy
2026-09-23 10:34:02
(7 hours ago)
Web Spam
🇺🇸
mnsf
2026-09-23 09:05:37
(9 hours ago)
Request Overload (131)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-23 07:21:19
(11 hours ago)
(mod_security) mod_security (id:210730) triggered by 54.172.198.37 (ec2-54-172-198-37.compute-1.amaz ...
show more
(mod_security) mod_security (id:210730) triggered by 54.172.198.37 (ec2-54-172-198-37.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 03:21:11.829248 2026] [security2:error] [pid 22116:tid 22116] [client 54.172.198.37:49762] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kingstoneproperties.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kingstoneproperties.com"] [uri "/[email protected] "] [unique_id "arN95yZEry-S8guRJxKwiAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-23 06:54:09
(11 hours ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
conseilgouz
2026-09-23 01:07:12
(17 hours ago)
ecw-Joomla User : try to access forms...
Hacking
🇺🇸
TPI-Abuse
2026-09-23 00:12:32
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 54.172.198.37 (ec2-54-172-198-37.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 54.172.198.37 (ec2-54-172-198-37.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 20:12:25.430124 2026] [security2:error] [pid 16178:tid 16178] [client 54.172.198.37:39336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "apuntesdeinversion.com"] [uri "/wp-config.php"] [unique_id "arMZafcqmUrALMSXJ2KTxgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ecode hosting
2026-09-22 16:48:06
(1 day ago)
Domain : topconhassastarim.com
Rule : UserAgent
2026-09-22 16:19:33 10.100.1.20 GET /index.php/tekno ...
show more
Domain : topconhassastarim.com
Rule : UserAgent
2026-09-22 16:19:33 10.100.1.20 GET /index.php/teknolojiler/x25-x35-hassas-uygulama - 443 - 54.172.198.37 HTTP/1.1 jobs-crawler/0.2 - topconhassastarim.com 200 0 0 67412 174 5771 - -
show less
Port Scan
2026-09-22 13:43:41
(1 day ago)
Web application attack detected.
Web App Attack
🇧🇪
taivas.nl
2026-09-22 13:32:12
(1 day ago)
Bad_requests
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-22 12:07:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 54.172.198.37 (ec2-54-172-198-37.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 54.172.198.37 (ec2-54-172-198-37.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:07:10.518207 2026] [security2:error] [pid 6022:tid 6022] [client 54.172.198.37:52368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adoniahenterprises.com"] [uri "/goober_.htaccess"] [unique_id "arJvbrrlVMeDwKqz9iuQFwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 11:44:06
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 54.172.198.37 (ec2-54-172-198-37.compute-1.amaz ...
show more
(mod_security) mod_security (id:210730) triggered by 54.172.198.37 (ec2-54-172-198-37.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:44:00.912828 2026] [security2:error] [pid 1004:tid 1004] [client 54.172.198.37:48376] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||accordionstars.com|F|2"] [data ".accordionfactory.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "accordionstars.com"] [uri "/www.accordionfactory.com"] [unique_id "arJqADhpheoLfxXmsKlGFQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇳
dineshskt4all
2026-09-22 10:10:55
(1 day ago)
54.172.198.37 - - [22/Sep/2026:10:10:51 +0000] "GET / HTTP/1.1" 301 5717 "-" "jobs-crawler/0.2"
...
IoT Targeted
