🇺🇸
TPI-Abuse
2026-11-10 02:38:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.70.242.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:38:36.557257 2026] [security2:error] [pid 3344:tid 3344] [client 172.70.242.7:11496] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.242.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:38:36.557257 2026] [security2:error] [pid 3344:tid 3344] [client 172.70.242.7:11496] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jbrodriguez.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jbrodriguez.com"] [uri "/index.php.bak"] [unique_id "avKDrKFvMUzCHPsRjTwoswAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 17:37:49
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.242.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:37:45.629661 2026] [security2:error] [pid 24764:tid 24764] [client 172.70.242.7:11245] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.242.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:37:45.629661 2026] [security2:error] [pid 24764:tid 24764] [client 172.70.242.7:11245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bookofraphael.com"] [uri "/wp-config.php.save"] [unique_id "avCzaSDbgMYKMu9SUxYZuQAAAGI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 09:17:20
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.242.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:17:13.342464 2026] [security2:error] [pid 12137:tid 12137] [client 172.70.242.7:13740] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.242.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:17:13.342464 2026] [security2:error] [pid 12137:tid 12137] [client 172.70.242.7:13740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kim-porter.com"] [uri "/wp-config.php.bak"] [unique_id "avA-GeNLzWRnmGaITpO4OAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
JCB
2026-11-06 10:24:00
UTC ·
(4 days ago)
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-11-05 17:27:55
UTC ·
(5 days ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-11-02 06:54:57
UTC ·
(1 week ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 09:32:09
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.70.242.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 04:32:04.721323 2026] [security2:error] [pid 3422:tid 3422] [client 172.70.242.7:10544] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.242.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 04:32:04.721323 2026] [security2:error] [pid 3422:tid 3422] [client 172.70.242.7:10544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lovestuff.net"] [uri "/.env.local"] [unique_id "aucHFFMnmXANw6kM5bzn4gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
abdubhai
2026-10-27 01:33:57
UTC ·
(2 weeks ago)
172.70.242.7 - - [27/Oct/2026:06
...
Brute-Force
🇨🇭
4server
2026-10-23 19:32:52
UTC ·
(2 weeks ago)
[FriOct2321:32:45.2511232026][security2:error][pid2214990:tid2215072][client172.70.242.7:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"9 ...
show more
[FriOct2321:32:45.2511232026][security2:error][pid2214990:tid2215072][client172.70.242.7:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"asyam.ch\"][uri\"/xmlrpc.php\"][unique_id\"atu2XZ4Ag6lnzOUIPcf5ugAAAJI\"]
show less
Hacking
Web App Attack
🇫🇷
Bensay
2026-10-23 02:15:26
UTC ·
(2 weeks ago)
Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result=blocked; user-agent=Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safa ...
show more
Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result=blocked; user-agent=Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1
show less
Port Scan
🇫🇷
dynamix
2026-10-21 00:57:10
UTC ·
(3 weeks ago)
Multiple WAF Violations
Web App Attack
🇧🇷
Sipo Chutão
2026-10-19 03:00:01
UTC ·
(3 weeks ago)
/Web-Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-18 11:31:26
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.70.242.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 07:31:19.952551 2026] [security2:error] [pid 1454:tid 1454] [client 172.70.242.7:11134] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.242.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 07:31:19.952551 2026] [security2:error] [pid 1454:tid 1454] [client 172.70.242.7:11134] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||atsllc.biz|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "atsllc.biz"] [uri "/atsllc.sql"] [unique_id "atSuB7OuMxfdAxY0_3t-JQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 07:14:18
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.70.242.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 03:14:13.225573 2026] [security2:error] [pid 2609:tid 2609] [client 172.70.242.7:13117] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.242.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 03:14:13.225573 2026] [security2:error] [pid 2609:tid 2609] [client 172.70.242.7:13117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rddeckerphotography.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rddeckerphotography.com"] [uri "/admin/config.php.bak"] [unique_id "atRxxV91h6wkjeVH_kjeuwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
www.tana.it
2026-10-18 06:22:23
UTC ·
(3 weeks ago)
PHP scan
Web App Attack
