🇺🇸
TPI-Abuse
2026-10-18 14:25:32
(15 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 10:25:24.505553 2026] [security2:error] [pid 4493:tid 4546] [client 172.70.243.113:10874] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||larryfoussconstruction.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "larryfoussconstruction.com"] [uri "/db.sql"] [unique_id "atTW1ML1Sa4kv8313bgyqgAAAQI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 00:51:22
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:51:16.541286 2026] [security2:error] [pid 8941:tid 8941] [client 172.70.243.113:11410] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||krugmans.org|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "krugmans.org"] [uri "/config.php.bak"] [unique_id "atQYBFH4FYmCDcYEJwmjHwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-17 20:16:14
(1 day ago)
[17/Oct/2026:23:16:13 +0300] -- 172.70.243.113 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[17/Oct/2026:23:16:13 +0300] -- 172.70.243.113 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /db.sql HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 17:04:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 13:04:29.330236 2026] [security2:error] [pid 19400:tid 19400] [client 172.70.243.113:13687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "comunicacion.elpais.mx"] [uri "/.git/config"] [unique_id "atOqnRpRCiLgV5FLDQ0ilgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 03:50:35
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 23:50:32.681238 2026] [security2:error] [pid 6190:tid 6190] [client 172.70.243.113:10294] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.faw.us|F|2"] [data ".us.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.faw.us"] [uri "/faw.us.sql"] [unique_id "as78CLdjIx1CnQ8zQmhqXAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 03:28:10
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 23:28:06.339966 2026] [security2:error] [pid 2433:tid 2433] [client 172.70.243.113:11897] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||stormstrips.info|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stormstrips.info"] [uri "/rezerv.sql"] [unique_id "as72xuBj8DqwrC2sTj4M3AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 02:36:40
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 22:36:32.869418 2026] [security2:error] [pid 12959:tid 12959] [client 172.70.243.113:13483] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.drjaymissdiana.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.drjaymissdiana.com"] [uri "/dump.sql"] [unique_id "as7qsAFS7YHOdMuSXuPevAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 21:59:57
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 17:59:51.751218 2026] [security2:error] [pid 16708:tid 16710] [client 172.70.243.113:11093] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mandhco.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mandhco.com"] [uri "/admin/config.php.bak"] [unique_id "as6p13ETDk4Zztr1J6ltFwAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-08 00:56:11
(1 week ago)
Web App Attack
🇩🇪
yitzhaq
2026-09-23 22:47:12
(3 weeks ago)
172.70.243.113 - - [24/Sep/2026:00:47:10 +0200] "GET /wp_blog_footer.php HTTP/2.0" 404 341 "-" "-"
1 ...
show more
172.70.243.113 - - [24/Sep/2026:00:47:10 +0200] "GET /wp_blog_footer.php HTTP/2.0" 404 341 "-" "-"
172.70.243.113 - - [24/Sep/2026:00:47:10 +0200] "GET /sss.php?p= HTTP/2.0" 404 55 "-" "-"
172.70.243.113 - - [24/Sep/2026:00:47:11 +0200] "GET /b8.php HTTP/2.0" 404 78 "-" "-"
172.70.243.113 - - [24/Sep/2026:00:47:11 +0200] "GET /xex.php HTTP/2.0" 404 46 "-" "-"
show less
Web App Attack
Hacking
🇧🇪
madeit
2026-09-03 06:41:33
(1 month ago)
Web App Attack
🇺🇸
MPL
2026-09-02 12:12:31
(1 month ago)
tcp/443 (5 or more attempts)
Port Scan
🇧🇪
madeit
2026-08-15 19:26:55
(2 months ago)
Web App Attack
🇷🇺
DZBOT
2026-07-04 02:38:17
(3 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 07:33:59
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 03:33:55.597773 2026] [security2:error] [pid 23848:tid 24009] [client 172.70.243.113:11304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "purposethroughpainco.com"] [uri "/.git/config"] [unique_id "ajo2412IDsqrf29m2cc3rgAAAhg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
