🇺🇸
TPI-Abuse
2026-11-11 14:37:05
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:36:57.285369 2026] [security2:error] [pid 22520:tid 22520] [client 172.69.150.204:9736] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:36:57.285369 2026] [security2:error] [pid 22520:tid 22520] [client 172.69.150.204:9736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "instalatoribucuresti.com"] [uri "/wp-config.php"] [unique_id "avR9iWrClrL8mKgtnvxL8wAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 00:42:05
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:41:58.439336 2026] [security2:error] [pid 26768:tid 26768] [client 172.69.150.204:11468] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:41:58.439336 2026] [security2:error] [pid 26768:tid 26768] [client 172.69.150.204:11468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bernardtardy.com"] [uri "/wp-config.php.save"] [unique_id "avO51q_VvAeCT7Fx2f50dgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 15:45:27
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:45:22.632152 2026] [security2:error] [pid 23344:tid 23344] [client 172.69.150.204:11056] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:45:22.632152 2026] [security2:error] [pid 23344:tid 23344] [client 172.69.150.204:11056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobresearchinc.com"] [uri "/wp-config.php.bak"] [unique_id "avM8EnLgTXn0zRRJQjCEfwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 07:51:16
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:51:12.410045 2026] [security2:error] [pid 16734:tid 16734] [client 172.69.150.204:9423] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:51:12.410045 2026] [security2:error] [pid 16734:tid 16734] [client 172.69.150.204:9423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.4starpromotions.com"] [uri "/wp-config.php.old"] [unique_id "avLM8Jlo5kRpbeSDgDLuDQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:47:31
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:47:24.976240 2026] [security2:error] [pid 20136:tid 20136] [client 172.69.150.204:11199] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:47:24.976240 2026] [security2:error] [pid 20136:tid 20136] [client 172.69.150.204:11199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alccontractorsllc.com"] [uri "/wp-config.php.save"] [unique_id "avJ3rMNC2xOlH7lK83SHrgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 21:46:47
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 16:46:40.854820 2026] [security2:error] [pid 10255:tid 10255] [client 172.69.150.204:10497] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 16:46:40.854820 2026] [security2:error] [pid 10255:tid 10255] [client 172.69.150.204:10497] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.madisonworkshopwest.com"] [uri "/.env.dev"] [unique_id "aukEwOGIxFJBqXFtzSObuQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-11-01 17:18:07
UTC ·
(1 week ago)
Web App Attack
🇫🇷
dynamix
2026-10-27 17:16:15
UTC ·
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-25 11:43:01
UTC ·
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-23 22:02:00
UTC ·
(2 weeks ago)
Web App Attack
🇫🇷
fmomo3143
2026-10-18 20:28:39
UTC ·
(3 weeks ago)
cie-7 : Trying access unauthorized files/dir=>/wp-content/plugins/bricksforge/readme.txt
Hacking
🇺🇸
TPI-Abuse
2026-10-18 08:07:17
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 04:07:08.819133 2026] [security2:error] [pid 16150:tid 16150] [client 172.69.150.204:13388] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 04:07:08.819133 2026] [security2:error] [pid 16150:tid 16150] [client 172.69.150.204:13388] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.havilahmalone.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.havilahmalone.com"] [uri "/db.sql"] [unique_id "atR-LMWL1H8d5mXPupaDJgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 01:05:21
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:04:59.161292 2026] [security2:error] [pid 6454:tid 6454] [client 172.69.150.204:11324] M ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.150.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:04:59.161292 2026] [security2:error] [pid 6454:tid 6454] [client 172.69.150.204:11324] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mikedeutsch.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mikedeutsch.com"] [uri "/db.sql"] [unique_id "atAmu2J4VOvAQybHlx2uIQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-13 23:14:46
UTC ·
(4 weeks ago)
Multiple WAF Violations
Web App Attack
🇧🇪
voormedia
2026-10-05 08:08:49
UTC ·
(1 month ago)
Accessed trap at '/wp-admin/install.php'
Web App Attack
