๐บ๐ธ
TPI-Abuse
2026-10-18 13:16:42
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:16:37.853130 2026] [security2:error] [pid 4121:tid 4121] [client 172.68.192.253:12008] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||teenybikini.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "teenybikini.com"] [uri "/teenybikini.com.sql"] [unique_id "atTGtQPtAYZrlf-FAICywgAAAD0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 11:42:30
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 07:42:25.302758 2026] [security2:error] [pid 11392:tid 11392] [client 172.68.192.253:12058] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lmjetservices.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lmjetservices.com"] [uri "/admin/config.php.bak"] [unique_id "atSwoeTXh_CWetYIGbTyvwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 10:01:10
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:01:04.440822 2026] [security2:error] [pid 6289:tid 6289] [client 172.68.192.253:10833] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||moleculardetective.org|F|2"] [data ".org.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "moleculardetective.org"] [uri "/moleculardetective.org.sql"] [unique_id "atSY4KZiaun-fFS1I-ugaQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-10-18 05:59:35
(1 day ago)
[18/Oct/2026:08:59:33 +0300] -- 172.68.192.253 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[18/Oct/2026:08:59:33 +0300] -- 172.68.192.253 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /db.zip HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 05:02:19
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 01:02:13.671762 2026] [security2:error] [pid 3820:tid 3820] [client 172.68.192.253:13470] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pappakotis.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pappakotis.com"] [uri "/pappakotis.sql"] [unique_id "atRS1duOA0hJJdAi6vRhHgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-18 04:26:00
(1 day ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 03:43:09
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:43:02.335226 2026] [security2:error] [pid 24030:tid 24030] [client 172.68.192.253:11275] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.stapleton.productions|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.stapleton.productions"] [uri "/stapleton.sql"] [unique_id "atRARgnkf84Pb0-D7KqvRAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 03:06:57
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:06:50.286157 2026] [security2:error] [pid 8507:tid 8507] [client 172.68.192.253:10713] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.seychelles-boat-registration.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.seychelles-boat-registration.com"] [uri "/config.php.bak"] [unique_id "atQ3ymNLF5FvyjiJcIRmAwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-17 22:19:07
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 18:18:59.537016 2026] [security2:error] [pid 16726:tid 16737] [client 172.68.192.253:10478] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||grupojdg.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "grupojdg.com"] [uri "/database.sql"] [unique_id "atP0U_qCVMMY0FppGxhwewAAAUQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-17 20:14:34
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.68.192.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 16:14:26.622140 2026] [security2:error] [pid 28915:tid 28915] [client 172.68.192.253:14295] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jmrlighting.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jmrlighting.com"] [uri "/backup.sql"] [unique_id "atPXIoWRfn7QzXRoqoWM8AAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
www.mammazone.it
2026-10-16 16:34:21
(3 days ago)
[Fri Oct 16 18:34:20.872206 2026] [proxy_fcgi:error] [pid 199478] [client 172.68.192.253:9275] AH010 ...
show more
[Fri Oct 16 18:34:20.872206 2026] [proxy_fcgi:error] [pid 199478] [client 172.68.192.253:9275] AH01071: Got error 'Primary script unknown'
[Fri Oct 16 18:34:21.014220 2026] [proxy_fcgi:error] [pid 199478] [client 172.68.192.253:9275] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
๐น๐ท
ScchutzZ
2026-10-16 15:05:13
(3 days ago)
Fail2Ban banฤฑ. Jail: plesk-modsecurity.
Brute-Force
๐น๐ท
ScchutzZ
2026-10-14 11:05:06
(5 days ago)
Fail2Ban banฤฑ. Jail: plesk-modsecurity.
Brute-Force
๐บ๐ฆ
URAN Publishing Service
2026-10-14 10:18:40
(5 days ago)
[14/Oct/2026:13:18:39 +0300] -- 172.68.192.253 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[14/Oct/2026:13:18:39 +0300] -- 172.68.192.253 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /public_html.zip HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-12 22:52:06
(6 days ago)
Multiple WAF Violations
Web App Attack
