🇺🇸
TPI-Abuse
2026-10-14 09:05:33
(20 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.69.150.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.150.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 05:05:28.265838 2026] [security2:error] [pid 31279:tid 31279] [client 172.69.150.122:9415] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||anywheregarden.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "anywheregarden.com"] [uri "/admin/config.php.bak"] [unique_id "as9F2M_6h2yII58gHpqn9AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 05:59:31
(23 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.69.150.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.150.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 01:59:23.723792 2026] [security2:error] [pid 31805:tid 31805] [client 172.69.150.122:12679] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.transparentforest.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.transparentforest.com"] [uri "/db.sql"] [unique_id "as8aO9jmyzp46_95gGzw5QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:43:41
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.69.150.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.150.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:43:32.191322 2026] [security2:error] [pid 30868:tid 30868] [client 172.69.150.122:11923] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pronio.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pronio.com"] [uri "/db.sql"] [unique_id "as60FLqPXXiuGQ-RkQ705gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 20:24:36
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 16:24:28.998736 2026] [security2:error] [pid 6987:tid 6987] [client 172.69.150.122:11823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thestarfinancialgroup.starfi.com"] [uri "/.git/config"] [unique_id "asQHfK34pgGmyzTcjVpLcAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-05 03:28:31
(1 week ago)
Web App Attack
🇩🇪
altenglaner
2026-10-04 03:24:30
(1 week ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇧🇪
madeit
2026-09-15 19:15:10
(4 weeks ago)
Web App Attack
🇵🇱
srebrakowski.com
2026-08-26 17:41:49
(1 month ago)
IDS/IPS Alert: ET EXPLOIT GraphQL Introspection Query Attempt. Protocol: TCP, Port: 80. Request: {"q ...
show more
IDS/IPS Alert: ET EXPLOIT GraphQL Introspection Query Attempt. Protocol: TCP, Port: 80. Request: {"query":"query IntrospectionQuery{__schema{queryType{name} types{name} directives{name}}}"}
show less
Hacking
Web App Attack
🇧🇪
madeit
2026-08-17 09:23:58
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-06 17:11:06
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 13:11:00.368562 2026] [security2:error] [pid 661932:tid 661932] [client 172.69.150.122:11911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lapapevip.spyasociados.com"] [uri "/.env.bak"] [unique_id "anTAJLG86-ynFWPYnUQFbAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-08-05 14:17:03
(2 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
lolyay
2026-07-31 02:18:44
(2 months ago)
172.69.150.122 - - [31/Jul/2026:02:10:51 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 200 4 "-" ...
show more
172.69.150.122 - - [31/Jul/2026:02:10:51 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 200 4 "-" "-"
172.69.150.122 - - [31/Jul/2026:02:18:43 +0000] "GET //wp-includes/css/dist/ HTTP/1.1" 200 4 "-" "-"
...
show less
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-31 17:34:02
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 13:33:51.141969 2026] [security2:error] [pid 14646:tid 14646] [client 172.69.150.122:13566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "help.gmacguffin.com"] [uri "/.env.development.local"] [unique_id "ahxw_yfoORg_VstlXRp51gAAABo"], referer: https://www.google.com/search?q=help.gmacguffin.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
WellSpring
2026-05-29 09:25:49
(4 months ago)
wordpress scan on officialcovenant.org/wp-admin/install.php — WellSpr.ing/NetSentinel civic-AI secur ...
show more
wordpress scan on officialcovenant.org/wp-admin/install.php — WellSpr.ing/NetSentinel civic-AI security layer
show less
Bad Web Bot
Web App Attack
🇦🇺
trentwiles.com
2026-05-15 05:19:48
(5 months ago)
Unauthorized connection attempt detected from IP address 172.69.150.122 to port 443 [SYD]
Port Scan
