🇩🇪
hackthetime
2026-10-18 09:27:03
(8 hours ago)
Tried to access /wp-admin/install.php (auto-added by Hype UI)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 05:18:53
(12 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.246.252 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.246.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 01:18:48.562367 2026] [security2:error] [pid 28584:tid 28584] [client 172.70.246.252:11658] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||brittaniaenterprises.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brittaniaenterprises.com"] [uri "/dump.sql"] [unique_id "atRWuKO5ToaPSjfsi5-r2QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-18 02:02:09
(15 hours ago)
[18/Oct/2026:05:02:08 +0300] -- 172.70.246.252 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[18/Oct/2026:05:02:08 +0300] -- 172.70.246.252 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /rezerv.sql HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 01:24:56
(16 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.246.252 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.246.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:24:49.011544 2026] [security2:error] [pid 16664:tid 16664] [client 172.70.246.252:11643] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||easy2surf.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "easy2surf.com"] [uri "/config.php.bak"] [unique_id "atQf4RR6_8zsXzRBwCkbyAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 01:09:40
(16 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.246.252 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.246.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:09:33.369197 2026] [security2:error] [pid 21241:tid 21241] [client 172.70.246.252:10727] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.performingartsguild.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.performingartsguild.com"] [uri "/db.sql"] [unique_id "atQcTYCG6g1gdeLz2WYZwQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 22:47:40
(18 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.70.246.252 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.246.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 18:47:30.675795 2026] [security2:error] [pid 20549:tid 20549] [client 172.70.246.252:13348] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pattymoorearmstrong.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pattymoorearmstrong.com"] [uri "/rezerv.sql"] [unique_id "atP7AjN4aQUXGePSJYZkKQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-15 16:52:26
(3 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 04:33:51
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.246.252 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.246.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 00:33:40.128194 2026] [security2:error] [pid 656:tid 656] [client 172.70.246.252:13068] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sailsara.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sailsara.com"] [uri "/rezerv.sql"] [unique_id "as8GJMbZQEFVU9-poyGtUQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-13 23:16:30
(4 days ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-01 11:59:42
(2 weeks ago)
Web App Attack
🇩🇪
paissangroup
2026-10-01 07:01:16
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-09-03 06:42:02
(1 month ago)
Web App Attack
2026-08-25 10:09:47
(1 month ago)
Failed Wordpress Logins
Web App Attack
2026-08-23 20:29:47
(1 month ago)
Failed Wordpress Logins
Web App Attack
2026-08-18 17:42:54
(1 month ago)
Failed Wordpress Logins
Web App Attack
