🇺🇸
TPI-Abuse
2026-09-03 05:00:00
(15 minutes ago)
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 00:59:55.896137 2026] [security2:error] [pid 23560:tid 23560] [client 167.99.233.101:47070] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:redirect" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||shhcenter.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "shhcenter.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apj-xzJ4WHcxdxBhlMlXTAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 01:17:23
(3 hours ago)
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 21:17:17.283007 2026] [security2:error] [pid 1595:tid 1595] [client 167.99.233.101:55086] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:redirect" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||sharonmauldin.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sharonmauldin.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apjKmpeRgYEkW0asZlHEQQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 23:52:09
(5 hours ago)
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 19:52:01.746248 2026] [security2:error] [pid 1394:tid 1394] [client 167.99.233.101:42496] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:redirect" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||shannonraevocalstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "shannonraevocalstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "api2niX7VhG__arwB1MQ6wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 15:23:07
(13 hours ago)
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 11:22:57.602863 2026] [security2:error] [pid 22091:tid 22091] [client 167.99.233.101:59350] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:redirect" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||seskalee.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "seskalee.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apg_TMuTwvXqA7VvB87ixwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-02 12:23:00
(16 hours ago)
GET /wp-admin/admin-ajax.php?action=wdpsso_step1&redirect= - Blocked access to admin-ajax.php
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 04:50:57
(1 day ago)
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:50:51.950767 2026] [security2:error] [pid 12463:tid 12463] [client 167.99.233.101:60898] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:redirect" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||semisysteme.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "semisysteme.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aperHLO_1PkHcOi1rgarVQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 23:03:51
(1 day ago)
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 19:03:46.933302 2026] [security2:error] [pid 16977:tid 16977] [client 167.99.233.101:52718] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:redirect" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||seizinthebook.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "seizinthebook.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apdZ0OcwzMFed1pQM0oPvQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 11:36:25
(1 day ago)
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:36:21.821094 2026] [security2:error] [pid 31537:tid 31537] [client 167.99.233.101:40364] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:redirect" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||scswat.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "scswat.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apa4s2FGqcQJ8w570fzJPwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 07:00:41
(1 day ago)
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:00:32.947178 2026] [security2:error] [pid 20408:tid 20408] [client 167.99.233.101:53340] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:redirect" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||schwanpaint.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "schwanpaint.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apZ4DSl39JAKOzdjGkteLgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-31 19:25:27
(2 days ago)
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ...
show more
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
show less
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-08-31 19:00:22
(2 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 17:45:14
(2 days ago)
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:243420) triggered by 167.99.233.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 13:45:06.415066 2026] [security2:error] [pid 9299:tid 9411] [client 167.99.233.101:39520] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:redirect" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||eliteproductions.tv|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "eliteproductions.tv"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apW9oSrulAd83EghThElMAAAAhY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
HostFission
2026-03-23 01:15:13
(5 months ago)
PSAD port scan detected
Port Scan
🇦🇺
PetePK
2026-03-23 00:59:01
(5 months ago)
Probed 1 time(s): TCP/1245
Port Scan
🇺🇸
MPL
2026-03-23 00:14:36
(5 months ago)
tcp/8883 (3 or more attempts)
Port Scan