🇺🇸
TPI-Abuse
2026-10-18 11:03:48
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 07:03:42.378563 2026] [security2:error] [pid 24375:tid 24375] [client 172.70.243.169:11564] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||copiershickory.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "copiershickory.com"] [uri "/database.sql"] [unique_id "atSnjjn5eDhS3wOVIka6IwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 09:45:50
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 05:45:46.037941 2026] [security2:error] [pid 8605:tid 8628] [client 172.70.243.169:13949] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.ethicmark.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ethicmark.org"] [uri "/rezerv.sql"] [unique_id "atSVSsny3rzlU_g5IPpRZQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 08:23:08
(4 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 04:23:01.650761 2026] [security2:error] [pid 10228:tid 10228] [client 172.70.243.169:12539] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||coloradospartans.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "coloradospartans.com"] [uri "/backup.sql"] [unique_id "atSB5c0N3rwfNmxmyMvmVgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-10-18 07:49:09
(4 hours ago)
{"level":"info","ts":1792309744.8754053,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1792309744.8754053,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"172.70.243.169","remote_port":"16953","client_ip":"34.185.136.201","proto":"HTTP/2.0","method":"GET","host":"status.figpii.com","uri":"/.env.credentials","headers":{"Accept":["*/*"],"Cf-Ray":["a4c5f1c1780eabfe-FRA"],"Cf-Ipcountry":["DE"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Forwarded-Proto":["https"],"Accept-Encoding":["gzip, br"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"X-Nextjs-Data":["1"],"Cf-Connecting-Ip":["34.185.136.201"],"X-Forwarded-For":["34.185.136.201"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server
...
show less
DDoS Attack
Web App Attack
2026-10-18 06:20:06
(6 hours ago)
| Suspicious URL access.
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-10-18 01:10:13
(11 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:10:04.569569 2026] [security2:error] [pid 30284:tid 30284] [client 172.70.243.169:9574] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||gonzalez.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gonzalez.com"] [uri "/database.sql"] [unique_id "atQcbK5i5Nhp-r2eghKlHwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 23:33:44
(13 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 19:33:37.601325 2026] [security2:error] [pid 21155:tid 21155] [client 172.70.243.169:13214] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||imageries.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "imageries.net"] [uri "/database.sql"] [unique_id "atQF0VAVN9AfR3DbLG3sdgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 06:31:43
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 02:31:38.028210 2026] [security2:error] [pid 28882:tid 28882] [client 172.70.243.169:12870] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||circlethreefl.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "circlethreefl.com"] [uri "/admin/config.php.bak"] [unique_id "as8hyjgGDKpt2aUE_ysFcgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 03:12:08
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 23:12:03.490585 2026] [security2:error] [pid 20338:tid 20338] [client 172.70.243.169:13618] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||coretermite.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "coretermite.com"] [uri "/rezerv.sql"] [unique_id "as7zA9jPjS4iYBWCAMkbmgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 01:30:54
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 21:30:48.281723 2026] [security2:error] [pid 18098:tid 18119] [client 172.70.243.169:11478] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mentzlaw.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mentzlaw.com"] [uri "/admin/config.php.bak"] [unique_id "as7bSBCV9yLe8L_6sdLBoQAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 00:38:55
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:38:49.354093 2026] [security2:error] [pid 23811:tid 23840] [client 172.70.243.169:11266] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||janetkeeton.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "janetkeeton.com"] [uri "/backup.sql"] [unique_id "as7PGYT40-YKCJhA6wVGJgAAANY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-01 12:38:30
(2 weeks ago)
Web App Attack
🇧🇪
madeit
2026-09-15 19:16:12
(1 month ago)
Web App Attack
🇫🇷
tecnicorioja
2026-09-08 22:00:37
(1 month ago)
wp-login attack [08/Sep/2026:12:34:05
Brute-Force
Web App Attack
🇫🇷
tecnicorioja
2026-09-01 22:00:28
(1 month ago)
wp-login attack [01/Sep/2026:22:56:57
Brute-Force
Web App Attack
