🇺🇸
TPI-Abuse
2026-11-12 02:18:55
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.246.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:18:50.587012 2026] [security2:error] [pid 23553:tid 23553] [client 172.70.246.229:9277] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.246.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:18:50.587012 2026] [security2:error] [pid 23553:tid 23553] [client 172.70.246.229:9277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "good4sound.com"] [uri "/wp-config.php.bak"] [unique_id "avUiCrW3iYH3wJvHiDSungAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
abdubhai
2026-11-11 09:25:41
UTC ·
(4 days ago)
172.70.246.229 - - [11/Nov/2026:
...
Brute-Force
🇧🇪
madeit
2026-11-09 19:23:41
UTC ·
(5 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 09:27:29
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.70.246.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 04:27:24.895341 2026] [security2:error] [pid 26134:tid 26134] [client 172.70.246.229:14329] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.246.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 04:27:24.895341 2026] [security2:error] [pid 26134:tid 26134] [client 172.70.246.229:14329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jessiedavison.com"] [uri "/.env.production"] [unique_id "auxL_DOy8yPznVPRf8engAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
pixelboost.kr
2026-10-26 11:00:00
UTC ·
(2 weeks ago)
172.70.246.229 - - [26/Oct/2026:19:59:59 +0900] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-25 06:54:48
UTC ·
(3 weeks ago)
Multiple WAF Violations
Web App Attack
🇩🇪
FeG Deutschland
2026-10-24 22:56:16
UTC ·
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
2026-10-20 23:49:42
UTC ·
(3 weeks ago)
Failed Wordpress Logins
Web App Attack
🇫🇷
dynamix
2026-10-18 14:26:41
UTC ·
(3 weeks ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 08:32:11
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.70.246.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 04:32:03.856537 2026] [security2:error] [pid 5696:tid 5696] [client 172.70.246.229:12458] M ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.246.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 04:32:03.856537 2026] [security2:error] [pid 5696:tid 5696] [client 172.70.246.229:12458] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||ps-omega.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ps-omega.com"] [uri "/db.sql"] [unique_id "atSEAz5hR0NghXlKQnDLdQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 07:29:55
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.70.246.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 03:29:48.225241 2026] [security2:error] [pid 20431:tid 20431] [client 172.70.246.229:12671] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.246.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 03:29:48.225241 2026] [security2:error] [pid 20431:tid 20431] [client 172.70.246.229:12671] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||michaelholdawayvideos.info|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "michaelholdawayvideos.info"] [uri "/db.sql"] [unique_id "atR1bNlrv6_G9poOOZLOAwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
mxbl
2026-10-18 02:00:10
UTC ·
(4 weeks ago)
Scanning for CMS vulnerabilities on a non-CMS system: /wp-content/plugins/bricksforge/readme.txt
Web App Attack
2026-10-17 23:24:57
UTC ·
(4 weeks ago)
Failed Wordpress Logins
Web App Attack
🇩🇪
altenglaner
2026-10-14 07:43:00
UTC ·
(1 month ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:53:28
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 172.70.246.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:53:19.249249 2026] [security2:error] [pid 16346:tid 16396] [client 172.70.246.229:12974] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.246.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:53:19.249249 2026] [security2:error] [pid 16346:tid 16396] [client 172.70.246.229:12974] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||asetiadi.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "asetiadi.net"] [uri "/rezerv.sql"] [unique_id "as62X3LnvhZWody7StwvBwAAARA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
