🇫🇷
LRob
2026-11-06 19:32:39
UTC ·
(5 days ago)
Web page flood (L7) | path: /, /en/, /en (+5 more)
DDoS Attack
Web App Attack
🇨🇭
backslash
2026-11-03 19:42:02
UTC ·
(1 week ago)
block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0
SQL Injection
🇺🇸
raymarron.com
2026-11-01 03:30:56
UTC ·
(1 week ago)
/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?id=... (x2)
Web App Attack
🇨🇿
SystemAdmin
2026-10-30 01:28:38
UTC ·
(1 week ago)
Doing bad things...
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 00:22:53
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 78.47.55.205 (static.205.55.47.78.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 20:22:47.054632 2026] [security2:error] [pid 19017:t ...
show more
(mod_security) mod_security (id:210492) triggered by 78.47.55.205 (static.205.55.47.78.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 20:22:47.054632 2026] [security2:error] [pid 19017:tid 19017] [client 78.47.55.205:43408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cinesonline.com"] [uri "/wp-config.php"] [unique_id "auKR1xCWiqOIRfKPL7_QJwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 02:27:10
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 78.47.55.205 (static.205.55.47.78.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 22:27:05.779423 2026] [security2:error] [pid 22986:t ...
show more
(mod_security) mod_security (id:210730) triggered by 78.47.55.205 (static.205.55.47.78.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 22:27:05.779423 2026] [security2:error] [pid 22986:tid 22986] [client 78.47.55.205:47302] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||accordionstars.com|F|2"] [data ".accordionfactory.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "accordionstars.com"] [uri "/www.accordionfactory.com"] [unique_id "auFdeQuD-PXTUb1oKrRy6wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-26 11:03:20
UTC ·
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
dot.mg
2026-10-24 04:07:03
UTC ·
(2 weeks ago)
Bad behaviour
Web Spam
🇳🇱
Site.eu
2026-10-23 23:34:28
UTC ·
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
conseilgouz
2026-10-23 11:19:06
UTC ·
(2 weeks ago)
dow-Joomla User : try to access forms...
Hacking
🇮🇹
mgarofano80
2026-10-20 23:23:25
UTC ·
(3 weeks ago)
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-20 19:08:04
UTC ·
(3 weeks ago)
[ti-26al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 78.47.55.205 - - [20/Oct/2026:21:07:30 +0200] "GET /frontend/Sm/clickboom/en_US/fonts/Blank-Theme-Icons/Blank-Theme-Icons.woff2 HTTP/ ...
show more
[ti-26al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 78.47.55.205 - - [20/Oct/2026:21:07:30 +0200] "GET /frontend/Sm/clickboom/en_US/fonts/Blank-Theme-Icons/Blank-Theme-Icons.woff2 HTTP/1.1" 404 37392 "https://dashboard.ngubusiness.com/css/shop/main.min.css?v=20250897" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36"
78.47.55.205 - - [20/Oct/2026:21:07:30 +0200] "GET /frontend/Sm/clickboom/en_US/fonts/Blank-Theme-Icons/Blank-Theme-Icons.woff HTTP/1.1" 404 31448 "https://dashboard.ngubusiness.com/css/shop/main.min.css?v=20250897" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36"
78.47.55.205 - - [20/Oct/2026:21:07:31 +0200] "
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 09:14:15
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 78.47.55.205 (static.205.55.47.78.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 05:14:09.998329 2026] [security2:error] [pid 15382:t ...
show more
(mod_security) mod_security (id:210730) triggered by 78.47.55.205 (static.205.55.47.78.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 05:14:09.998329 2026] [security2:error] [pid 15382:tid 15382] [client 78.47.55.205:57448] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||austli.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "austli.com"] [uri "/norkyn.com"] [unique_id "atXfYReK_GDldppDuuhQUQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-18 08:26:13
UTC ·
(3 weeks ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 78.47.55.205 (DE/Germany/static.205.55.47.78.clients.your-server.de): 1 in the last 3600 secs (0-195)
Hacking
🇫🇷
masterguru
2026-10-17 01:09:23
UTC ·
(3 weeks ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 78.47.55.205 (DE/Germany/static.205.55.47.78.clients.your-server.de): 1 in the last 3600 secs (0-196)
Hacking
