🇺🇸
TPI-Abuse
2026-10-18 02:12:42
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.180 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 22:12:32.295006 2026] [security2:error] [pid 19438:tid 19438] [client 172.70.243.180:11732] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.janaia.com.yubagals.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.janaia.com.yubagals.com"] [uri "/yubagals.sql"] [unique_id "atQrEE8n4qpMk8IvC2JAFAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Lino Project
2026-10-17 07:48:38
(19 hours ago)
172.70.243.180 - - [17/Oct/2026:09:48:37 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 1736 ...
show more
172.70.243.180 - - [17/Oct/2026:09:48:37 +0200] "GET /wp-admin/install.php?step=1 HTTP/2.0" 403 17362 "-" "http://primobio.live/wp-admin/install.php?step=1"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TIScore
2026-10-14 21:27:00
(3 days ago)
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path ...
show more
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path. Last path: /wp-admin/install.php
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 01:48:08
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.180 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 21:47:58.776077 2026] [security2:error] [pid 32161:tid 32161] [client 172.70.243.180:14214] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kochcreative.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kochcreative.com"] [uri "/backup.sql"] [unique_id "as7fTpuy45iUwUje9hw4sQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 00:05:28
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.180 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:05:20.830393 2026] [security2:error] [pid 21712:tid 21712] [client 172.70.243.180:11467] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.tribwatch.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.tribwatch.com"] [uri "/config.php.bak"] [unique_id "as7HQHG2SXbZxEjmyOR11gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:34:17
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.180 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:34:08.895584 2026] [security2:error] [pid 4622:tid 4622] [client 172.70.243.180:11281] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||belgium-boat-registration.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "belgium-boat-registration.com"] [uri "/dump.sql"] [unique_id "as6x4MHyh_2zl25q_asGcAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TIScore
2026-10-13 21:26:50
(4 days ago)
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path ...
show more
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path. Last path: /wp-admin/install.php
show less
Web App Attack
🇺🇸
TIScore
2026-10-12 06:56:24
(5 days ago)
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path ...
show more
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path. Last path: /wp-admin/install.php
show less
Web App Attack
🇺🇸
TIScore
2026-10-11 06:56:03
(6 days ago)
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path ...
show more
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path. Last path: /wp-admin/install.php
show less
Web App Attack
🇺🇸
TIScore
2026-10-10 04:55:53
(1 week ago)
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path ...
show more
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path. Last path: /wp-admin/install.php
show less
Web App Attack
🇦🇺
dyln
2026-10-09 22:12:46
(1 week ago)
Dyls honeypot brute-force: proto8 (22 total hits)
Brute-Force
🇫🇷
dynamix
2026-10-08 04:18:25
(1 week ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-04 02:44:12
(2 weeks ago)
Web App Attack
🇺🇸
TIScore
2026-10-01 07:22:50
(2 weeks ago)
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path ...
show more
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path. Last path: /wp-admin/install.php
show less
Web App Attack
🇩🇪
abdubhai
2026-09-16 02:34:20
(1 month ago)
172.70.243.180 - - [16/Sep/2026:
...
Brute-Force
