🇩🇪
Holger
2026-11-11 00:24:51
UTC ·
(4 days ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 10:35:45
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:35:39.180069 2026] [security2:error] [pid 23457:tid 23457] [client 172.70.243.135:12856] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:35:39.180069 2026] [security2:error] [pid 23457:tid 23457] [client 172.70.243.135:12856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sykesclan.com"] [uri "/wp-config.php.save"] [unique_id "avLze3RHkud1UipbtFAwLgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Valhalla
2026-11-10 03:10:15
UTC ·
(5 days ago)
/phpinfo.php
Hacking
Web App Attack
🇧🇪
madeit
2026-11-02 12:39:40
UTC ·
(1 week ago)
Web App Attack
🇩🇪
Holger
2026-10-29 09:30:33
UTC ·
(2 weeks ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇩🇪
Holger
2026-10-26 09:47:59
UTC ·
(2 weeks ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇩🇪
Holger
2026-10-23 22:15:30
UTC ·
(3 weeks ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 10:11:53
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:11:45.474427 2026] [security2:error] [pid 12059:tid 12059] [client 172.70.243.135:12604] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:11:45.474427 2026] [security2:error] [pid 12059:tid 12059] [client 172.70.243.135:12604] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.midway-island.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.midway-island.com"] [uri "/admin/config.php.bak"] [unique_id "atSbYZjiIfcMn6ji8MpR7wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 07:49:46
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 03:49:39.808075 2026] [security2:error] [pid 29042:tid 29042] [client 172.70.243.135:9248] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 03:49:39.808075 2026] [security2:error] [pid 29042:tid 29042] [client 172.70.243.135:9248] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||movierebuspuzzles.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "movierebuspuzzles.com"] [uri "/admin/config.php.bak"] [unique_id "atR6E_6gUgvB308-QVzBQAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 07:09:57
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 03:09:50.582536 2026] [security2:error] [pid 13609:tid 13609] [client 172.70.243.135:11134] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 03:09:50.582536 2026] [security2:error] [pid 13609:tid 13609] [client 172.70.243.135:11134] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||johneiden.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "johneiden.com"] [uri "/dump.sql"] [unique_id "atRwvrlsXUce-tKUZ_TvWwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 16:37:54
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:37:48.933671 2026] [security2:error] [pid 26791:tid 26791] [client 172.70.243.135:11627] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:37:48.933671 2026] [security2:error] [pid 26791:tid 26791] [client 172.70.243.135:11627] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||feathersolar.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "feathersolar.com"] [uri "/backup.sql"] [unique_id "as-v3Ahxbq-cXwbfBae7ZwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 14:54:36
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 10:54:32.837470 2026] [security2:error] [pid 13642:tid 13642] [client 172.70.243.135:10915] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 10:54:32.837470 2026] [security2:error] [pid 13642:tid 13642] [client 172.70.243.135:10915] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||htaautosales.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "htaautosales.com"] [uri "/config.php.bak"] [unique_id "as-XqNRvb0eDLM85MpoMZwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 11:11:12
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 07:11:08.785696 2026] [security2:error] [pid 26706:tid 26728] [client 172.70.243.135:14167] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 07:11:08.785696 2026] [security2:error] [pid 26706:tid 26728] [client 172.70.243.135:14167] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||classactionlawsuit.org|F|2"] [data ".org.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "classactionlawsuit.org"] [uri "/classactionlawsuit.org.sql"] [unique_id "as9jTOjGVwT8ic5SRmSQcQAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 01:17:33
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 21:17:26.986412 2026] [security2:error] [pid 13936:tid 13936] [client 172.70.243.135:12037] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 21:17:26.986412 2026] [security2:error] [pid 13936:tid 13936] [client 172.70.243.135:12037] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mavikalem.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mavikalem.org"] [uri "/database.sql"] [unique_id "as7YJmMrKnrgvL_s0dxF1QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 00:09:14
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:09:08.371542 2026] [security2:error] [pid 14372:tid 14372] [client 172.70.243.135:12465] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:09:08.371542 2026] [security2:error] [pid 14372:tid 14372] [client 172.70.243.135:12465] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lejzerowicz.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lejzerowicz.org"] [uri "/dump.sql"] [unique_id "as7IJN9bIXgW0Eukcuj_fQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
