🇺🇸
TPI-Abuse
2026-11-11 00:13:33
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:13:27.681434 2026] [security2:error] [pid 14945:tid 14945] [client 172.71.144.34:13256] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:13:27.681434 2026] [security2:error] [pid 14945:tid 14945] [client 172.71.144.34:13256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gegraphics.biz"] [uri "/wp-config.php"] [unique_id "avOzJ4keMD1rqMbkUwiVLgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TIScore
2026-11-10 18:30:08
UTC ·
(22 hours ago)
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path. Last path: /wp-admin/install.php
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:05:01
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:04:57.432307 2026] [security2:error] [pid 29664:tid 29664] [client 172.71.144.34:11900] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:04:57.432307 2026] [security2:error] [pid 29664:tid 29664] [client 172.71.144.34:11900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "masterpiecemorgans.com"] [uri "/wp-config.php.save"] [unique_id "avLQKSrsybcz-NCcldPenQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:28:19
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:28:12.379493 2026] [security2:error] [pid 24458:tid 24485] [client 172.71.144.34:14320] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:28:12.379493 2026] [security2:error] [pid 24458:tid 24485] [client 172.71.144.34:14320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vinylnotespodcast.com"] [uri "/.htaccess"] [unique_id "avKBPNVpnUAZJ31aH-hWsgAAAVM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 07:43:30
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 02:43:22.845580 2026] [security2:error] [pid 19117:tid 19117] [client 172.71.144.34:13454] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 02:43:22.845580 2026] [security2:error] [pid 19117:tid 19117] [client 172.71.144.34:13454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "poltorak.net"] [uri "/wp-config.php.save"] [unique_id "au7Wmu4Qvgh7BmOMWD3C1AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 03:30:27
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 22:30:13.830492 2026] [security2:error] [pid 29443:tid 29443] [client 172.71.144.34:12116] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 22:30:13.830492 2026] [security2:error] [pid 29443:tid 29443] [client 172.71.144.34:12116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ecodesarrollourbano.com"] [uri "/.svn/entries"] [unique_id "au6bRTiy4o0agmuwoOFjmgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-11-06 20:15:31
UTC ·
(4 days ago)
"GET /config.yml HTTP/1.1" 404 6500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
Web App Attack
🇺🇸
TIScore
2026-11-06 15:24:26
UTC ·
(5 days ago)
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path. Last path: /wp-admin/install.php
Web App Attack
🇺🇸
TIScore
2026-11-05 15:23:30
UTC ·
(6 days ago)
Automated web attack / probing. Signals: Admin-panel scan; Foreign script extension; Unexpected path. Last path: /wp-admin/install.php
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 08:18:17
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 03:18:12.014142 2026] [security2:error] [pid 24111:tid 24111] [client 172.71.144.34:11200] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 03:18:12.014142 2026] [security2:error] [pid 24111:tid 24111] [client 172.71.144.34:11200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dorioconnell.com"] [uri "/.env.staging"] [unique_id "auw7xDn2xcW-oVQ_9VSJuwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
craudiovizai
2026-11-04 18:30:45
UTC ·
(6 days ago)
Automated honeypot detection. blocked ip against a Next.js application. Paths: /wp-admin/install.php?step=1. Blocked at the edge.
Bad Web Bot
🇫🇷
dynamix
2026-11-04 17:06:50
UTC ·
(6 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
chrisj
2026-11-03 12:56:07
UTC ·
(1 week ago)
[Tue Nov 03 12:56:06.717472 2026] [proxy_fcgi:error] [pid 36111:tid 36130] [remote 172.71.144.34:10245] AH01071: Got error 'Primary script unknown'
[Tue Nov 03 12:56:06.842867 2026] [proxy_fcgi:error] [pid 36111:tid 36132] [remote 172.71.144.34:10245 ...
show more
[Tue Nov 03 12:56:06.717472 2026] [proxy_fcgi:error] [pid 36111:tid 36130] [remote 172.71.144.34:10245] AH01071: Got error 'Primary script unknown'
[Tue Nov 03 12:56:06.842867 2026] [proxy_fcgi:error] [pid 36111:tid 36132] [remote 172.71.144.34:10245] AH01071: Got error 'Primary script unknown'
[Tue Nov 03 12:56:06.959721 2026] [proxy_fcgi:error] [pid 36111:tid 36144] [remote 172.71.144.34:10245] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-11-03 04:58:00
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:57:49.340507 2026] [security2:error] [pid 13900:tid 13900] [client 172.71.144.34:12518] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:57:49.340507 2026] [security2:error] [pid 13900:tid 13900] [client 172.71.144.34:12518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.gdg1.com"] [uri "/.env.old"] [unique_id "aulpzVoTQY1NL2elzshh7gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 15:28:14
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:28:09.997616 2026] [security2:error] [pid 1517850:tid 1517867] [client 172.71.144.34:1366 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.144.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:28:09.997616 2026] [security2:error] [pid 1517850:tid 1517867] [client 172.71.144.34:13669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "taxelon.com"] [uri "/.env.backup"] [unique_id "auisCZWDN7vakFxKGtVCZwAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
