🇩🇪
LRob
2025-11-18 23:15:11
(9 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2025-11-09 16:43:32
(10 months ago)
HTTP referer spam
Web Spam
🇺🇦
URAN Publishing Service
2025-11-05 10:24:07
(10 months ago)
HTTP referer spam
Web Spam
🇺🇦
URAN Publishing Service
2025-11-03 01:13:33
(10 months ago)
HTTP referer spam
Web Spam
🇨🇭
backslash
2025-11-03 01:05:13
(10 months ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇺🇸
TPI-Abuse
2025-10-30 06:32:59
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 88.151.192.2 (115498.ip-ptr.tech): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 88.151.192.2 (115498.ip-ptr.tech): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 02:32:53.402740 2025] [security2:error] [pid 17244:tid 17244] [client 88.151.192.2:49696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.title26.com"] [uri "/.env"] [unique_id "aQMGlRiksdm1-5XKRBhe-wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-29 21:07:27
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 88.151.192.2 (115498.ip-ptr.tech): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 88.151.192.2 (115498.ip-ptr.tech): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 17:07:21.858368 2025] [security2:error] [pid 32459:tid 32459] [client 88.151.192.2:34812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.stareclipse.net"] [uri "/.git/config"] [unique_id "aQKCCf2QoZZiStAwI5jZAwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2025-10-27 16:45:10
(10 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2025-10-26 15:51:56
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 88.151.192.2 (115498.ip-ptr.tech): 1 in the las ...
show more
(mod_security) mod_security (id:210730) triggered by 88.151.192.2 (115498.ip-ptr.tech): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 26 11:51:47.136793 2025] [security2:error] [pid 31488:tid 31488] [client 88.151.192.2:42278] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||accordionstars.com|F|2"] [data ".accordionfactory.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "accordionstars.com"] [uri "/www.accordionfactory.com"] [unique_id "aP5Dk7rSmBdqjXohfOBjXgAAABQ"], referer: http://accordionstars.com/www.accordionfactory.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
Block Rockin' Beats
2025-10-20 11:50:23
(10 months ago)
Scanning forum with forged referal
Hacking
Web App Attack
🇦🇺
oncord
2025-10-20 03:28:01
(10 months ago)
Form spam
Web Spam
🇺🇸
oncord
2025-10-16 16:30:39
(10 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-10-16 04:24:59
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 88.151.192.2 (115498.ip-ptr.tech): 1 in the las ...
show more
(mod_security) mod_security (id:210730) triggered by 88.151.192.2 (115498.ip-ptr.tech): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 16 00:24:53.703618 2025] [security2:error] [pid 10219:tid 10219] [client 88.151.192.2:39772] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dmasoftlab.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dmasoftlab.com"] [uri "/database.sql"] [unique_id "aPBzlblgy6d39fdncuQR-QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2025-10-14 16:33:48
(10 months ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2025-10-13 22:37:04
(10 months ago)
(mod_security) mod_security (id:210831) triggered by 88.151.192.2 (115498.ip-ptr.tech): 1 in the las ...
show more
(mod_security) mod_security (id:210831) triggered by 88.151.192.2 (115498.ip-ptr.tech): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 13 18:36:59.894732 2025] [security2:error] [pid 5256:tid 5256] [client 88.151.192.2:50446] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.rohrbachfamilyfarms.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.rohrbachfamilyfarms.com"] [uri "/robots.txt"] [unique_id "aO1_C9BPU0kD2zRSTtLMKgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack