๐บ๐ธ
TPI-Abuse
2026-10-17 19:57:33
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 104.23.221.200 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 104.23.221.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 15:57:29.645095 2026] [security2:error] [pid 28465:tid 28465] [client 104.23.221.200:10241] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||drxcontent.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "drxcontent.com"] [uri "/rezerv.sql"] [unique_id "atPTKUacnCtfBNA0Cfi1TwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-10-17 19:36:21
(2 hours ago)
[SatOct1721:36:15.6816962026][security2:error][pid2966929:tid2966979][client104.23.221.200:0]ModSecu ...
show more
[SatOct1721:36:15.6816962026][security2:error][pid2966929:tid2966979][client104.23.221.200:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"ggarchitetti.ch\"][uri\"/rezerv.sql\"][unique_id\"atPOL1A3dFFEdH6liiHxvwAAABQ\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-17 19:26:56
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 104.23.221.200 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 104.23.221.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 15:26:49.764462 2026] [security2:error] [pid 22838:tid 22838] [client 104.23.221.200:10612] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||tyning.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tyning.com"] [uri "/rezerv.sql"] [unique_id "atPL-Zm4Ibu5AsgL1cejywAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-17 19:26:47
(2 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ฉ๐ช
Lino Project
2026-10-16 16:44:09
(1 day ago)
104.23.221.200 - - [16/Oct/2026:18:44:09 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 1737 ...
show more
104.23.221.200 - - [16/Oct/2026:18:44:09 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 17373 "-" "http://primobio.live/wp-admin/install.php?step=1"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Lino Project
2026-10-16 11:07:34
(1 day ago)
104.23.221.200 - - [16/Oct/2026:13:07:33 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 1737 ...
show more
104.23.221.200 - - [16/Oct/2026:13:07:33 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 17373 "-" "http://primobio.live/wp-admin/install.php?step=1"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Lino Project
2026-10-16 09:11:13
(1 day ago)
104.23.221.200 - - [16/Oct/2026:11:11:12 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 1737 ...
show more
104.23.221.200 - - [16/Oct/2026:11:11:12 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 17371 "-" "http://primobio.live/wp-admin/install.php?step=1"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Lino Project
2026-10-16 07:19:50
(1 day ago)
104.23.221.200 - - [16/Oct/2026:09:19:50 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 1738 ...
show more
104.23.221.200 - - [16/Oct/2026:09:19:50 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 17380 "-" "http://primobio.live/wp-admin/install.php?step=1"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Lino Project
2026-10-15 03:06:05
(2 days ago)
104.23.221.200 - - [15/Oct/2026:05:06:04 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 1737 ...
show more
104.23.221.200 - - [15/Oct/2026:05:06:04 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 17371 "-" "http://primobio.live/wp-admin/install.php?step=1"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Lino Project
2026-10-15 01:12:37
(2 days ago)
104.23.221.200 - - [15/Oct/2026:03:12:36 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 1737 ...
show more
104.23.221.200 - - [15/Oct/2026:03:12:36 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 17371 "-" "http://primobio.live/wp-admin/install.php?step=1"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-10-11 02:12:54
(6 days ago)
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-10 09:24:02
(1 week ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-09 10:20:51
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.23.221.200 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.221.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 06:20:47.506026 2026] [security2:error] [pid 2772:tid 2772] [client 104.23.221.200:12807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jodstar.com"] [uri "/.git/config"] [unique_id "asi__zLUHiASr_35U6BR3QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-30 11:10:07
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.23.221.200 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.221.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 07:09:59.707167 2026] [security2:error] [pid 26530:tid 26530] [client 104.23.221.200:10297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "needtoorderprinting.com"] [uri "/.git/config"] [unique_id "arzuB6GdNamyXK0q5IMiNQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-30 10:24:04
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.23.221.200 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.221.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:23:58.332090 2026] [security2:error] [pid 18503:tid 18507] [client 104.23.221.200:11517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "julianositalianrestaurant.com"] [uri "/.git/config"] [unique_id "arzjPklJCijGFH_wg7XIpgAAAQE"]
show less
Brute-Force
Bad Web Bot
Web App Attack