🇺🇸
TPI-Abuse
2026-10-18 10:35:40
(14 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:35:33.027359 2026] [security2:error] [pid 19657:tid 19657] [client 172.70.243.12:9601] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||clcmillvale.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "clcmillvale.com"] [uri "/admin/config.php.bak"] [unique_id "atSg9ZEsfBZ3Hb37dWhG6gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 10:12:27
(15 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:12:22.369377 2026] [security2:error] [pid 28629:tid 28629] [client 172.70.243.12:11551] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vaxd.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vaxd.org"] [uri "/db.sql"] [unique_id "atSbho9x5Scb1TUwHLHR4wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 01:34:57
(23 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:34:51.216036 2026] [security2:error] [pid 8629:tid 8629] [client 172.70.243.12:12830] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||techworksunlimited.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "techworksunlimited.com"] [uri "/config.php.bak"] [unique_id "atQiO6z1s1EJN1ueJfPefwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-17 23:26:13
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-10-17 22:27:11
(1 day ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇫🇷
dynamix
2026-10-14 19:59:00
(4 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 06:29:26
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 02:29:17.963730 2026] [security2:error] [pid 14579:tid 14579] [client 172.70.243.12:11753] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||janeeyrecollection.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "janeeyrecollection.com"] [uri "/db.sql"] [unique_id "as8hPb1MlbPb1n45g8CS_QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 05:55:20
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 01:55:12.315893 2026] [security2:error] [pid 5586:tid 5586] [client 172.70.243.12:12117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||watlab.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "watlab.com"] [uri "/database.sql"] [unique_id "as8ZQMcOi9Leu1cjmI7xyAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 23:58:18
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:58:12.087895 2026] [security2:error] [pid 19262:tid 19262] [client 172.70.243.12:12832] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||butterflybuilders.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "butterflybuilders.net"] [uri "/database.sql"] [unique_id "as7FlIUeCF_v8Zqp-hvKdgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-05 19:36:11
(1 week ago)
Web App Attack
🇷🇺
DZBOT
2026-08-11 19:53:09
(2 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇧🇪
madeit
2026-08-09 18:40:35
(2 months ago)
Web App Attack
2026-07-16 04:30:47
(3 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 06:37:49
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 02:37:38.937762 2026] [security2:error] [pid 27384:tid 27384] [client 172.70.243.12:11605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arsenalfordemocracy.com"] [uri "/.env.production"] [unique_id "alcqsu43bKNC-vWNLNdKPQAAAD8"], referer: https://www.google.com/search?q=arsenalfordemocracy.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 15:16:08
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 11:16:02.305360 2026] [security2:error] [pid 25520:tid 25520] [client 172.70.243.12:10769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pittyvaich.com"] [uri "/.git/config"] [unique_id "af3-MoRBPvOnncznKD68SQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
