🇺🇸
TPI-Abuse
2025-09-10 22:22:55
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 8.210.11.248 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 8.210.11.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 10 18:22:48.363070 2025] [security2:error] [pid 30394:tid 30394] [client 8.210.11.248:7129] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||icansayit.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "icansayit.com"] [uri "/pictures/desktop.ini"] [unique_id "aMH6ONDL72AmZ0vYhqCIjQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ChamberofCommerce.com
2025-09-10 21:06:39
(1 year ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot
🇺🇸
ChamberofCommerce.com
2025-09-10 16:39:17
(1 year ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:586
show less
Bad Web Bot
🇺🇸
kosada.com
2025-09-10 15:33:26
(1 year ago)
Web vulnerability probing
Web App Attack
2025-09-09 16:37:17
(1 year ago)
Malicious activity detected
Hacking
Web App Attack
🇫🇷
bigorre.org
2025-09-09 13:54:25
(1 year ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇺🇸
TPI-Abuse
2025-09-09 05:57:26
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 8.210.11.248 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 8.210.11.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 09 01:57:22.173120 2025] [security2:error] [pid 3329:tid 3329] [client 8.210.11.248:12054] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.player-care.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.player-care.com"] [uri "/cb/sofi-cds/Thumbs.db"] [unique_id "aL_BwuN6NtFyPq4GwxSHmgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Starburst SysOp Team
2025-09-08 15:43:59
(1 year ago)
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 248.11.210.8.rbl.malwar ...
show more
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 248.11.210.8.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-1)
show less
Hacking
🇺🇸
TPI-Abuse
2025-09-08 14:48:54
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 8.210.11.248 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 8.210.11.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 08 10:48:46.053637 2025] [security2:error] [pid 19175:tid 19175] [client 8.210.11.248:11992] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.batw.net|F|2"] [data ".borzois.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.batw.net"] [uri "/borzois.com/www.borzois.com"] [unique_id "aL7szhSo-6nElZF_w8fJkQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-08 09:01:02
(1 year ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-09-07 21:28:09
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 8.210.11.248 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 8.210.11.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 07 17:28:04.490956 2025] [security2:error] [pid 27163:tid 27163] [client 8.210.11.248:47310] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gsrsv.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gsrsv.org"] [uri "/springtimeinc.com"] [unique_id "aL345Bi_nre0OfW43C_MdgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-07 06:43:23
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 8.210.11.248 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 8.210.11.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 07 02:43:16.136271 2025] [security2:error] [pid 23569:tid 23569] [client 8.210.11.248:52363] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thegitsmovie.com|F|2"] [data ".lastcallmovies.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thegitsmovie.com"] [uri "/fincludes/www.lastcallmovies.com"] [unique_id "aL0phKvDJkFkjGurF8f0iAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-06 18:47:17
(1 year ago)
Malicious activity detected
Hacking
Web App Attack
2025-09-05 00:26:04
(1 year ago)
Malicious activity detected
Hacking
Web App Attack
🇦🇺
afleventoffice.com.au
2025-09-04 23:25:27
(1 year ago)
GET /ashes-faq.php HTTP/1.1
Web App Attack