🇺🇸
TPI-Abuse
2026-11-10 02:49:08
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.193.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:49:00.640853 2026] [security2:error] [pid 1149:tid 1149] [client 172.68.193.160:13155] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.193.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:49:00.640853 2026] [security2:error] [pid 1149:tid 1149] [client 172.68.193.160:13155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bluegrassexpressband.com"] [uri "/wp-config.php.save"] [unique_id "avKGHOmaX_w7QHKQILZrJQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
www.mammazone.it
2026-11-09 04:46:49
UTC ·
(2 days ago)
[Mon Nov 09 05:46:49.070254 2026] [proxy_fcgi:error] [pid 1036846] [client 172.68.193.160:10650] AH01071: Got error 'Primary script unknown'
[Mon Nov 09 05:46:49.252348 2026] [proxy_fcgi:error] [pid 1036846] [client 172.68.193.160:10650] AH01071: Got ...
show more
[Mon Nov 09 05:46:49.070254 2026] [proxy_fcgi:error] [pid 1036846] [client 172.68.193.160:10650] AH01071: Got error 'Primary script unknown'
[Mon Nov 09 05:46:49.252348 2026] [proxy_fcgi:error] [pid 1036846] [client 172.68.193.160:10650] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
🇺🇸
TPI-Abuse
2026-11-09 01:43:52
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.193.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:43:45.544247 2026] [security2:error] [pid 30456:tid 30456] [client 172.68.193.160:13800] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.193.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:43:45.544247 2026] [security2:error] [pid 30456:tid 30456] [client 172.68.193.160:13800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeffhinkley.com"] [uri "/wp-config.php.bak"] [unique_id "avElUSRBKY1l761NF2WM7wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-11-08 16:12:25
UTC ·
(2 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 01:47:41
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.193.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 20:47:36.001026 2026] [security2:error] [pid 9295:tid 9295] [client 172.68.193.160:13415] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.193.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 20:47:36.001026 2026] [security2:error] [pid 9295:tid 9295] [client 172.68.193.160:13415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perkowski.net"] [uri "/.env.old"] [unique_id "au6DOC3HjMR0rp4qgJxNRAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
S.O.B.A. Dev.
2026-11-04 20:06:54
UTC ·
(6 days ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇧🇪
madeit
2026-11-04 09:49:33
UTC ·
(6 days ago)
Web App Attack
🇷🇺
DZBOT
2026-07-19 06:03:09
UTC ·
(3 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-16 22:03:22
UTC ·
(3 months ago)
Auto-ban: >3000 req/min op 2026-07-16
Web App Attack
SSH
Hacking
2025-02-13 13:55:22
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-02-11 21:37:09
UTC ·
(1 year ago)
Detected Hacking, SQL Injection or general Web App Attack
Web App Attack
2025-02-09 07:41:14
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-02-08 02:10:25
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-02-06 22:17:01
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 172.68.193.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 06 17:16:54.284184 2025] [security2:error] [pid 19974:tid 19974] [client 172.68.193.160:30184] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.193.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 06 17:16:54.284184 2025] [security2:error] [pid 19974:tid 19974] [client 172.68.193.160:30184] [client 172.68.193.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.redish.org"] [uri "/.env"] [unique_id "Z6U01ob7mbsvV4Sy-VxlXQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
no1knows.com
2025-01-28 13:15:16
UTC ·
(1 year ago)
2025/01/28 13:15:00 [error] 139022#139022: *11645 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.68.193.160, server: _, request: "GET /mod_footer/tmpl/index.php HTTP/1.1", upstream: "fastcgi: ...
show more
2025/01/28 13:15:00 [error] 139022#139022: *11645 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.68.193.160, server: _, request: "GET /mod_footer/tmpl/index.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
2025/01/28 13:15:07 [error] 139022#139022: *11645 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.68.193.160, server: _, request: "GET /themes/twentynineteen/inc/content.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
2025/01/28 13:15:14 [error] 139022#139022: *11645 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.68.193.160, server: _, request: "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
...
show less
Brute-Force
Bad Web Bot
