🇺🇸
TPI-Abuse
2026-10-18 12:06:35
(7 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 08:06:29.611099 2026] [security2:error] [pid 22006:tid 22006] [client 172.70.243.249:10531] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||balay.pamplonaserviciotecnico.com|F|2"] [data ".pamplonaserviciotecnico.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "balay.pamplonaserviciotecnico.com"] [uri "/balay.pamplonaserviciotecnico.com.sql"] [unique_id "atS2Rfk9Jk5vOVUUOxkF2AAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 09:36:01
(10 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 05:35:54.158451 2026] [security2:error] [pid 8251:tid 8251] [client 172.70.243.249:13104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||coordinatedtechnology.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "coordinatedtechnology.net"] [uri "/coordinatedtechnology.sql"] [unique_id "atSS-rfzzke3m014Yx4qBwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 07:58:50
(11 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 03:58:42.620799 2026] [security2:error] [pid 20161:tid 20205] [client 172.70.243.249:13304] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kiehnefamily.us|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kiehnefamily.us"] [uri "/db.sql"] [unique_id "atR8MtH0yHV3TrrXLsyfuQAAAVg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 04:37:33
(15 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 00:37:24.257084 2026] [security2:error] [pid 31041:tid 31041] [client 172.70.243.249:13110] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mcarrollcommunications.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mcarrollcommunications.com"] [uri "/db.sql"] [unique_id "atRNBBPZC2TDqUkQKd6JcwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 04:16:55
(15 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 00:16:52.284869 2026] [security2:error] [pid 16630:tid 16640] [client 172.70.243.249:13843] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||infectioncontrolsys.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "infectioncontrolsys.com"] [uri "/admin/config.php.bak"] [unique_id "atRINB9tnJG9BGa-c_XHwQAAAMY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 01:27:06
(18 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:26:58.803677 2026] [security2:error] [pid 8451:tid 8451] [client 172.70.243.249:11284] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gregdember.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gregdember.com"] [uri "/dump.sql"] [unique_id "atQgYkqGxCqxem5ce2EepQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-17 20:40:22
(23 hours ago)
[17/Oct/2026:23:40:21 +0300] -- 172.70.243.249 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[17/Oct/2026:23:40:21 +0300] -- 172.70.243.249 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /db.zip HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 19:50:11
(23 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 15:50:04.356937 2026] [security2:error] [pid 9788:tid 9788] [client 172.70.243.249:10226] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hughhart.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hughhart.com"] [uri "/hughhart.com.sql"] [unique_id "atPRbMs5M2rwFeHu87JOwwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-17 00:51:58
(1 day ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-14 02:13:35
(4 days ago)
Multiple WAF Violations
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-14 02:03:43
(4 days ago)
[14/Oct/2026:05:03:42 +0300] -- 172.70.243.249 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[14/Oct/2026:05:03:42 +0300] -- 172.70.243.249 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /kpi.sql HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 01:18:07
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 21:18:00.983272 2026] [security2:error] [pid 28924:tid 28924] [client 172.70.243.249:9912] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||partybussantafe.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "partybussantafe.com"] [uri "/admin/config.php.bak"] [unique_id "as7YSDZ0qN1E_hatADXWSQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 23:39:59
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.243.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:39:53.779544 2026] [security2:error] [pid 11376:tid 11376] [client 172.70.243.249:13626] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.liverpoolfootballprogrammes.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.liverpoolfootballprogrammes.com"] [uri "/liverpoolfootballprogrammes.sql"] [unique_id "as7BSV_6ivxjMrNTT1wcJgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-07 23:09:29
(1 week ago)
Aggressive web scan
Web App Attack
2026-10-06 23:23:16
(1 week ago)
Blocked by firewall on hugin [8443/tcp] | Rule: UFW | SPT: 12432 | TTL: 57 | LEN: 60 | TOS: 0x00 • R ...
show more
Blocked by firewall on hugin [8443/tcp] | Rule: UFW | SPT: 12432 | TTL: 57 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
