🇮🇳
liveaspankaj
2026-04-11 04:14:32
(3 months ago)
DDoS attack: 53 requests in 5m (GET / or repair.php).
DDoS Attack
2025-09-17 11:47:00
(9 months ago)
"Undesired, excess traffic against library/education infrastructure"
Brute-Force
🇺🇸
TPI-Abuse
2025-09-16 06:54:13
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 77.111.247.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 77.111.247.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 02:54:06.890534 2025] [security2:error] [pid 5542:tid 5542] [client 77.111.247.73:19129] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||livinghomegrown.com|F|2"] [data ".dat.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "livinghomegrown.com"] [uri "/wallet.dat.backup"] [unique_id "aMkJjhQab0Mosq-09loqqwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-16 05:49:21
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 77.111.247.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 77.111.247.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 01:49:15.839308 2025] [security2:error] [pid 6754:tid 6754] [client 77.111.247.73:56005] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||wfinetwork.net|F|2"] [data ".dat.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wfinetwork.net"] [uri "/wallet.dat.backup"] [unique_id "aMj6W2B_IxrMetXOL8z6kwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-16 05:24:37
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 77.111.247.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 77.111.247.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 01:24:29.679026 2025] [security2:error] [pid 20271:tid 20271] [client 77.111.247.73:35433] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lusocleaningservice.com|F|2"] [data ".dat.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lusocleaningservice.com"] [uri "/wallet.dat.backup"] [unique_id "aMj0jQWcsBDESlwOVDd6GgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Phenix Info
2025-08-19 14:26:09
(10 months ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇩🇪
BestFans.com
2025-08-09 13:17:45
(11 months ago)
Credential brute-force attacks on webpage logins
Brute-Force
🇩🇪
BestFans.com
2025-06-19 02:45:13
(1 year ago)
Credential brute-force attacks on webpage logins
Brute-Force
🇳🇱
ParaBug
2025-06-16 07:50:05
(1 year ago)
77.111.247.73 - - [16/Jun/2025:09:50:05 +0200] "GET /sites/all/modules/fckeditor/fckeditor/editor/fi ...
show more
77.111.247.73 - - [16/Jun/2025:09:50:05 +0200] "GET /sites/all/modules/fckeditor/fckeditor/editor/filemanager/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder=%2F HTTP/1.1" 404 3121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Phishing
Brute-Force
Web App Attack
🇮🇪
Jim Keir
2025-06-09 02:42:29
(1 year ago)
2025-06-09 02:42:24 77.111.247.73 File scanning, blocking 77.111.247.73 for 5 minutes
Web App Attack
🇺🇸
Major Hostility
2025-06-05 19:57:58
(1 year ago)
"GET /admin/fckeditor/editor/filemanager/connectors/php/connector.php?Command=GetFoldersAndFiles&Typ ...
show more
"GET /admin/fckeditor/editor/filemanager/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder=%2F HTTP/1.1" 404
"GET /include/fckeditor/editor/filemanager/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder=%2F HTTP/1.1" 404
show less
Web App Attack
🇫🇷
IRISIO
2025-06-05 13:59:47
(1 year ago)
scans/SQL injection/spam posts : 6 queries
SQL Injection
Web App Attack
🇫🇷
rellik
2025-06-04 19:40:00
(1 year ago)
Mass Scanning Critical Files, Potential Part of BotNet
DDoS Attack
Hacking
Brute-Force
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-06-01 17:15:20
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇫🇷
IRISIO
2025-05-28 06:33:33
(1 year ago)
scans/SQL injection/spam posts : 2 queries
SQL Injection
Web App Attack