🇺🇸
TPI-Abuse
2026-06-15 07:01:22
(23 hours ago)
(mod_security) mod_security (id:210730) triggered by 98.159.43.30 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 98.159.43.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:01:06.312532 2026] [security2:error] [pid 10641:tid 10641] [client 98.159.43.30:38475] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.mympizzas.com.mx|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.mympizzas.com.mx"] [uri "/.config"] [unique_id "ai-jMpx_QTbhdayCi11N_gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-07 09:51:47
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 98.159.43.30 (TH/Thailand/-)
SQL Injection
🇨🇭
zynex
2026-06-06 18:03:03
(1 week ago)
URL Probing: /administrator/templates/isis/index.php
Web App Attack
🇩🇪
BlueWire Hosting
2026-06-06 14:05:26
(1 week ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-06 04:32:43
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 98.159.43.30 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 98.159.43.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 00:32:28.986815 2026] [security2:error] [pid 30217:tid 30217] [client 98.159.43.30:42269] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.animatuevento.com.mx|F|2"] [data ".google.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.animatuevento.com.mx"] [uri "/render/https:/www.google.com"] [unique_id "aiOi3NYxNbfAbLKTz3sStQAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-05 17:41:18
(1 week ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
2026-06-05 16:32:30
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 98.159.43.30 (TH/Thailand/-)
SQL Injection
🇨🇳
pengpeng
2026-05-18 02:13:23
(4 weeks ago)
monitor: on VM-0-7-ubuntu | port: 54605 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ...
show more
monitor: on VM-0-7-ubuntu | port: 54605 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
2026-05-17 04:36:55
(4 weeks ago)
Banned by Fail2Ban on server
Web App Attack
🇩🇪
ghostwarriors
2026-05-16 23:50:09
(4 weeks ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tilellit.pro
2026-05-16 16:25:14
(4 weeks ago)
Fail2Ban banned 98.159.43.30 for security violations in jail nginx-aggressive. Log: 2026/05/16 16:25 ...
show more
Fail2Ban banned 98.159.43.30 for security violations in jail nginx-aggressive. Log: 2026/05/16 16:25:13 [error] FastCGI sent in stderr: "Primary script unknown" , client: 98.159.43.30, server: [REDACTED], request: "GET //admin/controller/extension/extension/index.php HTTP/2.0", upstream: [REDACTED], host: [REDACTED], referrer: "http://cnpuertocolon.com//admin/controller/extension/extension/index.php"
2026/05/16 16:25:14 [error] FastCGI sent in stderr: "Primary script unknown" , client: 98.159.43.30, server: [REDACTED], request: "GET //templates/Beez5/index.php HTTP/2.0", upstream: [REDACTED], host: [REDACTED], referrer: "http://cnpuertocolon.com//templates/Beez5/index.php"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-05-12 12:43:07
(1 month ago)
Aggressive web search of vulnerable pages: /wp-content/uploads/wp-file-manager-pro/fm_backup/ /wp-co ...
show more
Aggressive web search of vulnerable pages: /wp-content/uploads/wp-file-manager-pro/fm_backup/ /wp-content/uploads/well-known/ /wp-content/uploa ...
show less
Web App Attack
🇮🇹
VHosting
2026-05-10 01:15:03
(1 month ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-04-19 20:15:07
(1 month ago)
Multiple WAF Violations
Web App Attack
🇬🇧
consul.to
2026-04-19 03:43:22
(1 month ago)
Web attack/malicious scanning detected
Web App Attack