🇺🇸
dtorrer
2026-06-04 10:17:05
(4 days ago)
Client attempted to submit spam on a website post.
Blog Spam
🇱🇻
garmtech.com
2026-05-28 16:36:47
(1 week ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-36.91.223.133.164.web-spamm ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-36.91.223.133.164.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇱🇻
garmtech.com
2026-05-19 00:11:34
(2 weeks ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:03-11.91.223.133.164
Web App Attack
🇺🇸
TPI-Abuse
2026-04-17 10:48:37
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 91.223.133.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 91.223.133.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 06:48:31.675452 2026] [security2:error] [pid 1703468:tid 1703468] [client 91.223.133.164:64661] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||GarantaConsulting.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "garantaconsulting.com"] [uri "/mailto:[email protected] "] [unique_id "aeIP__TKYxwF_8utfs_I2wAAAAM"], referer: http://GarantaConsulting.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-12 17:40:49
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 91.223.133.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 91.223.133.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 13:40:41.657479 2026] [security2:error] [pid 1429383:tid 1429383] [client 91.223.133.164:65039] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.CapitalSwissCorp.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.capitalswisscorp.com"] [uri "/mailto:[email protected] "] [unique_id "advZGYl7-owxyjwUJEu_ZwAAABk"], referer: http://www.CapitalSwissCorp.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-28 13:57:17
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 91.223.133.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 91.223.133.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 09:57:11.784753 2026] [security2:error] [pid 32266:tid 32266] [client 91.223.133.164:55193] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.capitalswisscorp.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.capitalswisscorp.com"] [uri "/mailto:[email protected] "] [unique_id "acfeN-4yr4zvdQkj5F_YlgAAABU"], referer: http://www.capitalswisscorp.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2026-02-03 09:58:18
(4 months ago)
Critical web app attack detected. Illegal Accept header: charset parameter
Web App Attack
🇺🇸
TPI-Abuse
2026-01-09 19:54:20
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 91.223.133.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 91.223.133.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 09 14:54:16.624285 2026] [security2:error] [pid 13798:tid 13798] [client 91.223.133.164:43305] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.capitalswisscorp.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.capitalswisscorp.com"] [uri "/mailto:[email protected] "] [unique_id "aWFc6CNEp3EToMr-gTORKAAAAAM"], referer: http://www.capitalswisscorp.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-03 09:36:18
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 91.223.133.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 91.223.133.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 03 04:36:12.670263 2026] [security2:error] [pid 30854:tid 30854] [client 91.223.133.164:35183] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.holgerfeld.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.holgerfeld.com"] [uri "/mailto:[email protected] "] [unique_id "aVjjDEUjxoGf7FcnQe97oQAAAAg"], referer: http://www.holgerfeld.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-12-21 09:53:13
(5 months ago)
Bad Web Bot
🇨🇭
backslash
2025-10-06 09:22:03
(8 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇺🇸
octageeks.com
2025-09-09 04:21:12
(8 months ago)
Wordpress malicious attack:[octa404]
Web App Attack
🇦🇺
MAGIC
2025-04-22 07:14:02
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
Psycho Solutions LLC
2025-04-17 21:10:34
(1 year ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 4/17/2025 9:10 pm (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2025-04-17 08:24:43
(1 year ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 4/17/2025 8:24 am (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack