🇺🇸
TPI-Abuse
2026-11-12 01:59:10
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:59:03.049751 2026] [security2:error] [pid 25903:tid 25903] [client 172.70.243.138:12564] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:59:03.049751 2026] [security2:error] [pid 25903:tid 25903] [client 172.70.243.138:12564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "syscomprint.com"] [uri "/wp-config.php"] [unique_id "avUdZ9U_7KuxEYwFwRVE6QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 01:19:55
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:19:51.596946 2026] [security2:error] [pid 17065:tid 17065] [client 172.70.243.138:14286] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:19:51.596946 2026] [security2:error] [pid 17065:tid 17065] [client 172.70.243.138:14286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.milakproductions.systemcapacityoptimization.com"] [uri "/wp-config.php"] [unique_id "avUUN64KEn3XQcJoXBNyQgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 20:36:22
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:36:18.054153 2026] [security2:error] [pid 21341:tid 21341] [client 172.70.243.138:12924] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:36:18.054153 2026] [security2:error] [pid 21341:tid 21341] [client 172.70.243.138:12924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "halblog.com"] [uri "/wp-config.php.bak"] [unique_id "avTRwihXRi_ziN7nbVrIDQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 06:25:34
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 01:25:30.551255 2026] [security2:error] [pid 14577:tid 14577] [client 172.70.243.138:11758] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 01:25:30.551255 2026] [security2:error] [pid 14577:tid 14577] [client 172.70.243.138:11758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ianmagarzo.com"] [uri "/wp-config.php.old"] [unique_id "avQKWgJgcnAVmknSsWrcVwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 03:35:37
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:35:28.524247 2026] [security2:error] [pid 5835:tid 5835] [client 172.70.243.138:13563] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:35:28.524247 2026] [security2:error] [pid 5835:tid 5835] [client 172.70.243.138:13563] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artigelisim.com"] [uri "/wp-config.php"] [unique_id "avPigJoyDmYYf1iQXxLpCwAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 09:37:55
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:37:49.320915 2026] [security2:error] [pid 28152:tid 28152] [client 172.70.243.138:9865] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:37:49.320915 2026] [security2:error] [pid 28152:tid 28152] [client 172.70.243.138:9865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xalais.com"] [uri "/wp-config.php.bak"] [unique_id "avLl7bkBsU7h0zvztPFE5QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 07:09:15
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:09:01.475554 2026] [security2:error] [pid 11401:tid 11401] [client 172.70.243.138:12038] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:09:01.475554 2026] [security2:error] [pid 11401:tid 11401] [client 172.70.243.138:12038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fuentevictoria.com"] [uri "/wp-config.php.old"] [unique_id "avLDDRYFlZJOwCb-mGy7vAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:58:36
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:58:31.547939 2026] [security2:error] [pid 14571:tid 14571] [client 172.70.243.138:11888] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:58:31.547939 2026] [security2:error] [pid 14571:tid 14571] [client 172.70.243.138:11888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "good4sound.com"] [uri "/wp-config.php"] [unique_id "avJ6R--vnLFJNDxqgw4z1QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 02:59:03
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 21:58:46.381034 2026] [security2:error] [pid 25319:tid 25319] [client 172.70.243.138:12227] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 21:58:46.381034 2026] [security2:error] [pid 25319:tid 25319] [client 172.70.243.138:12227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kirbyimc.com"] [uri "/.env"] [unique_id "au6T5slkK0yl39e0sw2drQAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 22:41:02
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 17:40:56.446299 2026] [security2:error] [pid 23223:tid 23223] [client 172.70.243.138:10036] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 17:40:56.446299 2026] [security2:error] [pid 23223:tid 23223] [client 172.70.243.138:10036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lendren.com"] [uri "/.env.staging"] [unique_id "au0F-OLzjyvArxe-5DJzuAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-11-05 17:06:39
UTC ·
(6 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 08:44:15
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 03:44:10.428426 2026] [security2:error] [pid 32297:tid 32297] [client 172.70.243.138:10557] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 03:44:10.428426 2026] [security2:error] [pid 32297:tid 32297] [client 172.70.243.138:10557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.grandriverhomes.com"] [uri "/.env.bak"] [unique_id "auxB2plBIgPBsvzI0j0TmQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-24 20:53:05
UTC ·
(2 weeks ago)
Web App Attack
🇺🇸
craudiovizai
2026-10-23 12:30:33
UTC ·
(2 weeks ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
Web App Attack
Bad Web Bot
🇺🇸
entangled_mongoose
2026-10-23 11:42:43
UTC ·
(2 weeks ago)
Probed /admin.php.
Web App Attack
