🇯🇵
Valhalla
2026-02-08 03:03:37
(8 months ago)
/wallets/log.txt
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-07 10:40:57
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 85.203.45.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 85.203.45.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 05:40:51.659842 2026] [security2:error] [pid 1562402:tid 1562446] [client 85.203.45.55:34967] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bluetigertees.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bluetigertees.com"] [uri "/restore/mysql.sql"] [unique_id "aYcWs1GHO4oC0Q2dQXD2lwAAAYo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-20 11:26:31
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 85.203.45.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 85.203.45.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 06:26:27.016163 2026] [security2:error] [pid 9834:tid 9834] [client 85.203.45.55:46857] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||asiabeef.network|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "asiabeef.network"] [uri "/backup/backup.sql"] [unique_id "aW9mYy7PqEVjweASB-zZvAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Penny Packer
2026-01-14 13:35:17
(9 months ago)
Fail2Ban apache-tripwires
Web App Attack
🇩🇪
bescared
2026-01-13 01:08:37
(9 months ago)
F2B - Malicious activity detected. URL Probing.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-08 19:50:20
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 85.203.45.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 85.203.45.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 08 14:50:17.428995 2026] [security2:error] [pid 18917:tid 18917] [client 85.203.45.55:44919] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.crypto-stamps.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.crypto-stamps.com"] [uri "/back/wallet.dat"] [unique_id "aWAKeeAjvHLFO8Cv2J941AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 17:57:37
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 85.203.45.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 85.203.45.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:57:31.754678 2025] [security2:error] [pid 5085:tid 5085] [client 85.203.45.55:65249] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||thegoldentether.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thegoldentether.com"] [uri "/back/dump.sql"] [unique_id "aVLBC-gI-1qlhEj6PhjZWwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Valhalla
2025-12-28 05:49:34
(9 months ago)
/www.sql
Hacking
Web App Attack
🇺🇸
WizardsToolkit
2025-12-20 18:00:43
(9 months ago)
attempted to access /backups/website.tar.gz
Web App Attack
🇺🇸
Penny Packer
2025-12-09 08:33:17
(10 months ago)
Fail2Ban apache-tripwires
Web App Attack
🇺🇸
TPI-Abuse
2025-12-01 19:14:42
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 85.203.45.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 85.203.45.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 14:14:38.810892 2025] [security2:error] [pid 19347:tid 19347] [client 85.203.45.55:23505] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||trafficstopper.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "trafficstopper.com"] [uri "/backup.sql"] [unique_id "aS3pHo7gAERMG9_NW3AT8QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-30 12:54:06
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 85.203.45.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 85.203.45.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 30 07:54:02.013550 2025] [security2:error] [pid 12190:tid 12190] [client 85.203.45.55:34013] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pellman-world.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pellman-world.com"] [uri "/backups/www.sql"] [unique_id "aSw-alCi8dxdudR5bPd6egAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2025-11-25 21:05:18
(10 months ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇮🇹
Rosh
2025-11-25 16:56:40
(10 months ago)
[11/25/25 17:56:40] 1 attack: //templates/Aaika/error.php (severity 5);
Web App Attack
🇺🇦
URAN Publishing Service
2025-11-21 05:06:42
(10 months ago)
85.203.45.55 - - [21/Nov/2025:07:06:35 +0200] "GET //wp-content/plugins/flex/alfa.php HTTP/1.1" 404 ...
show more
85.203.45.55 - - [21/Nov/2025:07:06:35 +0200] "GET //wp-content/plugins/flex/alfa.php HTTP/1.1" 404 274 "-" "Go-http-client/1.1"
85.203.45.55 - - [21/Nov/2025:07:06:42 +0200] "GET //wp-content/plugins/phpadmin/acp.php HTTP/1.1" 404 274 "-" "Go-http-client/1.1"
...
show less
Web App Attack
