🇺🇸
TPI-Abuse
2026-06-09 10:18:23
(18 hours ago)
(mod_security) mod_security (id:211190) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:18:17.025720 2026] [security2:error] [pid 19953:tid 19953] [client 106.12.173.76:59008] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||mail.ehrlichfamily.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ehrlichfamily.com"] [uri "/index.php"] [unique_id "aifoaWd-xpncwwcqvDvLYwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-09 05:47:52
(22 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
dynamix
2026-06-09 04:52:44
(23 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 13:16:55
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 09:16:49.666079 2026] [security2:error] [pid 14854:tid 14854] [client 106.12.173.76:38536] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||xtrl.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "xtrl.com"] [uri "/home/tancedi1/public_html/xtrl.com"] [unique_id "aibAwfdzcDzq3sVjzKusPAAAABs"], referer: http://xtrl.com/home/tancedi1/public_html/xtrl.com/?s=captcha
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
iBlockBadBots
2026-06-08 10:00:07
(1 day ago)
WAF blocked multiple times in 24h. Paths: /; /index.php; /index.php/module/action/param1/$%7B@print% ...
show more
WAF blocked multiple times in 24h. Paths: /; /index.php; /index.php/module/action/param1/$%7B@print%28md5%282333%29%29%7D; /public/index.php; /index.php/index
show less
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-06-07 23:08:47
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 16:45:19
(2 days ago)
(mod_security) mod_security (id:211190) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 12:45:14.675977 2026] [security2:error] [pid 18726:tid 18726] [client 106.12.173.76:53704] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||buildpower.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buildpower.com"] [uri "/index.php"] [unique_id "aiWgGo6Lidmce_zepo6OuwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 23:14:19
(3 days ago)
(mod_security) mod_security (id:211190) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 19:14:13.710785 2026] [security2:error] [pid 10833:tid 10978] [client 106.12.173.76:59948] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||spiritualchristian.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spiritualchristian.com"] [uri "/index.php"] [unique_id "aiSpxeDOe4jaiIkl7-LavwAAAY0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-06 19:30:58
(3 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 08:04:50
(3 days ago)
(mod_security) mod_security (id:211190) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 04:04:46.258809 2026] [security2:error] [pid 29493:tid 29493] [client 106.12.173.76:56654] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||blue-attitude.net|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blue-attitude.net"] [uri "/index.php"] [unique_id "aiPUnnCpdcKMuF5kh4JncgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-04 09:45:18
(5 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 19:36:09
(1 week ago)
(mod_security) mod_security (id:211190) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 15:36:03.934979 2026] [security2:error] [pid 25867:tid 25867] [client 106.12.173.76:51584] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||lhhs69.org|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lhhs69.org"] [uri "/index.php"] [unique_id "ah8wo-f2WHk-RNhrLvFVVgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 12:21:39
(1 week ago)
(mod_security) mod_security (id:211190) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 106.12.173.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 08:21:32.676048 2026] [security2:error] [pid 2584:tid 2584] [client 106.12.173.76:37294] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||acmyles.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acmyles.com"] [uri "/index.php"] [unique_id "ah7KzMwjhsT3JU93k1qtGgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-02 12:10:33
(1 week ago)
Multiple WAF Violations
Web App Attack
🇫🇷
IRISIO
2026-06-02 09:27:06
(1 week ago)
scans/SQL injection/spam posts : 72 queries
Web App Attack
SQL Injection