🇺🇸
TPI-Abuse
2026-10-18 07:53:11
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 03:53:05.837051 2026] [security2:error] [pid 12998:tid 12998] [client 172.69.150.82:10154] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||deals.directnic-support.rocks|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "deals.directnic-support.rocks"] [uri "/db.sql"] [unique_id "atR64a7qC2Lhj5Lkwd01mwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-18 06:01:21
(2 days ago)
[18/Oct/2026:09:01:20 +0300] -- 172.69.150.82 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-c ...
show more
[18/Oct/2026:09:01:20 +0300] -- 172.69.150.82 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-content/plugins/bricksforge/readme.txt HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 04:40:30
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 00:40:22.293391 2026] [security2:error] [pid 20163:tid 20255] [client 172.69.150.82:12852] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sweeneyzone.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sweeneyzone.com"] [uri "/sweeneyzone.com.sql"] [unique_id "atRNtlitK1LVnn7K56ADzQAAARI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 03:24:47
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:24:44.158124 2026] [security2:error] [pid 18534:tid 18534] [client 172.69.150.82:12681] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.perthdps.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.perthdps.com"] [uri "/rezerv.sql"] [unique_id "atQ7_MbfrG8zm4I-mRIk1wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 02:01:07
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 22:00:56.450403 2026] [security2:error] [pid 30400:tid 30400] [client 172.69.150.82:10910] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||ismaelcavazos.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ismaelcavazos.com"] [uri "/ismaelcavazos.sql"] [unique_id "atQoWMC7xAb86WNkCsIqiAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 01:42:37
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:42:29.479244 2026] [security2:error] [pid 4224:tid 4224] [client 172.69.150.82:13010] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.34thprs.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.34thprs.org"] [uri "/34thprs.sql"] [unique_id "atQkBZeTlXS3EtCFCgmtiQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 00:06:19
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:06:13.595854 2026] [security2:error] [pid 26572:tid 26572] [client 172.69.150.82:11748] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||teachingthestars.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "teachingthestars.com"] [uri "/rezerv.sql"] [unique_id "atQNdZghiYcjR7YSiLTkfAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-15 23:16:11
(5 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 05:52:52
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.150.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 01:52:47.059351 2026] [security2:error] [pid 10386:tid 10386] [client 172.69.150.82:11837] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.oliverhardy.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.oliverhardy.com"] [uri "/database.sql"] [unique_id "as8Yr_fdOzLscxXzzp-aCwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-12 15:38:04
(1 week ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-04 18:54:50
(2 weeks ago)
Web App Attack
🇦🇱
router.al
2026-08-22 21:23:57
(1 month ago)
08/22/2026-21:23:57.424145 172.69.150.82 Protocol: 6 ET SCAN LeakIX Inbound User-Agent
Hacking
🇧🇪
madeit
2026-08-17 08:10:57
(2 months ago)
Web App Attack
🇪🇸
Gem
2026-08-07 22:09:02
(2 months ago)
Unauthorized web scan.
Web App Attack
🇩🇪
4server
2026-06-07 20:40:04
(4 months ago)
[SunJun0722:40:01.7506302026][security2:error][pid131911:tid131993][client172.69.150.82:0]ModSecurit ...
show more
[SunJun0722:40:01.7506302026][security2:error][pid131911:tid131993][client172.69.150.82:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"hdcadvisory.ch.136-243-54-122.cpanel.site\"][uri\"/.git/config\"][unique_id\"aiXXIayxD4z4goW36mIWEgAAAJQ\"]
show less
Port Scan
Brute-Force
Web App Attack
