🇪🇸
masterguru
2026-06-19 17:31:25
(5 days ago)
(wplogin) Failed WordPress login from 91.203.144.194 (UA/Ukraine/-): 5 in the last 3600 secs (0-122)
Hacking
🇩🇪
big-cloud.nl
2026-06-14 20:34:52
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
🇨🇭
zynex
2026-06-12 00:07:57
(1 week ago)
URL Probing: /index.php
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 02:32:11
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 91.203.144.194 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 91.203.144.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 22:32:04.190802 2026] [security2:error] [pid 13227:tid 13227] [client 91.203.144.194:33940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.northernlightsbev.com"] [uri "/.git/config"] [unique_id "aiTYJBMI85rAgMiEuahxqwAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-02 11:57:03
(3 weeks ago)
block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-31 21:56:01
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 91.203.144.194 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 91.203.144.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 17:55:57.508651 2026] [security2:error] [pid 3515:tid 3515] [client 91.203.144.194:46342] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dvdmasters.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dvdmasters.com"] [uri "/dump.sql"] [unique_id "ahyubXZQzuQAd-tM3cxVDAAAAAU"], referer: dvdmasters.com/dump.sql
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 04:39:48
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 91.203.144.194 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 91.203.144.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 00:39:43.641913 2026] [security2:error] [pid 24535:tid 24541] [client 91.203.144.194:41082] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||artthatfeedsthehomeless.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "artthatfeedsthehomeless.org"] [uri "/dump.sql"] [unique_id "ahu7j_QBS8ZCIyOnW7lnzAAAAIQ"], referer: artthatfeedsthehomeless.org/dump.sql
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-05-29 01:18:42
(3 weeks ago)
Form spam
Web Spam
🇦🇺
oncord
2026-05-25 00:31:29
(1 month ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-05-24 18:21:53
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 91.203.144.194 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 91.203.144.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 14:21:48.253882 2026] [security2:error] [pid 25726:tid 25726] [client 91.203.144.194:49192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||musicalmuses.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "musicalmuses.com"] [uri "/dump.sql"] [unique_id "ahNBvBSQ2dRzKmRtuuwoYwAAAAo"], referer: musicalmuses.com/dump.sql
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-24 17:00:08
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 91.203.144.194 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 91.203.144.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 13:00:03.710728 2026] [security2:error] [pid 12084:tid 12107] [client 91.203.144.194:44254] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||computeinitiative.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "computeinitiative.org"] [uri "/dump.sql"] [unique_id "ahMuk2B-aq7IVMbPJsV3igAAANM"], referer: computeinitiative.org/dump.sql
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-23 19:47:39
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 91.203.144.194 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 91.203.144.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 15:47:30.743550 2026] [security2:error] [pid 23667:tid 23667] [client 91.203.144.194:37228] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bigislandhawaiirealestate.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bigislandhawaiirealestate.com"] [uri "/dump.sql"] [unique_id "ahIEUig5-BstU8Jo_hPyDwAAAAI"], referer: bigislandhawaiirealestate.com/dump.sql
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oncord
2026-05-20 02:05:33
(1 month ago)
Form spam
Web Spam
🇬🇧
relianoid.com
2026-05-19 19:46:11
(1 month ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇩🇪
onlyops.app
2026-05-19 02:00:15
(1 month ago)
Failed login attempts on Plesk control panel | detected by Fail2Ban (plesk-panel jail) | onlyops.app
Brute-Force
