🇺🇸
TPI-Abuse
2026-10-23 11:34:18
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 94.154.127.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 94.154.127.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 07:34:13.940190 2026] [security2:error] [pid 30811:tid 30811] [client 94.154.127.46:25783] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asmechatronics.nextngnr.com"] [uri "/Xulpbo.htaccess"] [unique_id "attGNQdb8l-PzBXzCLXONAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-09-09 03:36:52
(1 month ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 94.154.127.46 (AM/Armenia/-): 1 in ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 94.154.127.46 (AM/Armenia/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 14:54:23
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 94.154.127.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 94.154.127.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 10:54:19.113402 2026] [security2:error] [pid 26753:tid 26753] [client 94.154.127.46:19315] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apbnG0biiOxgP4lKnjwTmQAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Drahcir Yaug
2026-08-26 11:27:00
(1 month ago)
Try login to ssl-vpn
Brute-Force
🇨🇦
DRI
2026-08-26 07:29:20
(1 month ago)
Web attack/Malicious activity detected
Web App Attack
🇩🇪
HandyTreff.de
2026-07-24 18:34:17
(2 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -63.932 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -63.932 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.3622.7
show less
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-23 00:31:07
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 94.154.127.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 94.154.127.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 20:30:59.225810 2026] [security2:error] [pid 1844745:tid 1844745] [client 94.154.127.46:15115] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Eclipse II/Thumbs.db"] [unique_id "amFgwwqJtuvUEAv1bLZ5AQAAAAo"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Eclipse%20II/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-05-29 05:50:15
(4 months ago)
Kingcopy(AI-IDS):IP is Probing for Multiple vulnerabilities WTF:Banned
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-16 22:07:03
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 94.154.127.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 94.154.127.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 18:06:53.770098 2026] [security2:error] [pid 24473:tid 24473] [client 94.154.127.46:24471] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Jayne/Thumbs.db"] [unique_id "agjqfdLC8kQXC_weL2BFFgAAAAg"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Jayne/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-05-16 13:09:29
(5 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-03-14 12:14:45
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 94.154.127.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 94.154.127.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 08:14:42.902664 2026] [security2:error] [pid 13568:tid 13568] [client 94.154.127.46:26769] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kerrywood.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kerrywood.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abVRMnPheplHdWBftHQ4bgAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 10:18:59
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 94.154.127.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 94.154.127.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 06:18:54.258481 2026] [security2:error] [pid 16396:tid 16396] [client 94.154.127.46:44465] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Kendall/Thumbs.db"] [unique_id "abU2DsSQXYatbVoiBaaQAQAAABA"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Kendall/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-02-04 02:15:07
(8 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
nodepile
2025-12-16 14:31:45
(10 months ago)
Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/umnitza-orion-v2-led-angel-eyes-fo ...
show more
Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/umnitza-orion-v2-led-angel-eyes-for-20092012-f01-p-6184.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1263.63 Safari/537.36')
show less
Open Proxy
VPN IP
🇨🇭
backslash
2025-12-01 01:50:08
(10 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
