🇺🇸
TPI-Abuse
2026-10-18 02:31:48
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 22:31:41.298637 2026] [security2:error] [pid 13889:tid 13889] [client 172.68.192.171:11188] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||akoy.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "akoy.com"] [uri "/database.sql"] [unique_id "atQvjY_MJarTl0VoofhZcwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-18 02:23:27
(2 hours ago)
[18/Oct/2026:05:23:26 +0300] -- 172.68.192.171 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp- ...
show more
[18/Oct/2026:05:23:26 +0300] -- 172.68.192.171 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-content/plugins/bricksforge/readme.txt HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇯🇵
Valhalla
2026-10-18 01:26:07
(3 hours ago)
/rezerv.sql
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 00:00:21
(4 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:00:11.931391 2026] [security2:error] [pid 3641:tid 3649] [client 172.68.192.171:11953] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pmdwebenterprises.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pmdwebenterprises.com"] [uri "/database.sql"] [unique_id "atQMC0vwT-cVoWzFoRwOgAAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 19:46:29
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 15:46:25.036020 2026] [security2:error] [pid 17539:tid 17539] [client 172.68.192.171:14190] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||mauriene.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mauriene.com"] [uri "/admin/config.php.bak"] [unique_id "as_cEQQ_o8WEYLKqhT87ogAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 05:53:31
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 01:53:21.732537 2026] [security2:error] [pid 22360:tid 22360] [client 172.68.192.171:11253] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||templeantiques.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "templeantiques.org"] [uri "/rezerv.sql"] [unique_id "as8Y0eE6HKxvKn3b_F-cYwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 02:35:23
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 22:35:10.895618 2026] [security2:error] [pid 28808:tid 28808] [client 172.68.192.171:11123] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||westernmassaa.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "westernmassaa.net"] [uri "/backup.sql"] [unique_id "as7qXjUKVH9RF87OnE_VBgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 08:25:40
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 04:25:37.560600 2026] [security2:error] [pid 704:tid 704] [client 172.68.192.171:10292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "formationone.com.kooroshvaziri.com"] [uri "/.git/config"] [unique_id "as3rAdlBi7Gixo3M7bjRIwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-12 13:45:08
(5 days ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-08 05:01:27
(1 week ago)
Multiple WAF Violations
Web App Attack
🇩🇪
neckaralb-admin.de
2026-10-07 01:38:46
(1 week ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇫🇷
vtchost.com
2026-10-06 00:12:06
(1 week ago)
forbidden http request, scanning for weaknesses
...
Web App Attack
🇧🇪
madeit
2026-10-02 06:32:17
(2 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 09:24:59
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 05:24:55.658391 2026] [security2:error] [pid 11865:tid 11865] [client 172.68.192.171:13896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "styxwetworld.com"] [uri "/.git/config"] [unique_id "arzVZ9e71XGZQYHdyoL-ugAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 19:27:55
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.192.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 15:27:50.860436 2026] [security2:error] [pid 14903:tid 14948] [client 172.68.192.171:14036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "credit-protector.com.credit-card-cap.com"] [uri "/.git/config"] [unique_id "arq_th6N5kMBHtZ_sSugeQAAAYo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
