🇺🇸
TPI-Abuse
2026-11-10 06:19:08
UTC ·
(42 minutes ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:19:04.551924 2026] [security2:error] [pid 2095:tid 2095] [client 172.71.164.112:12037] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:19:04.551924 2026] [security2:error] [pid 2095:tid 2095] [client 172.71.164.112:12037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "josephalosi.com"] [uri "/wp-config.php"] [unique_id "avK3WOvfwD9-BEBP3Yrb3AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 04:40:51
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:40:43.599040 2026] [security2:error] [pid 18344:tid 18344] [client 172.71.164.112:10398] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:40:43.599040 2026] [security2:error] [pid 18344:tid 18344] [client 172.71.164.112:10398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whomakestherules.com"] [uri "/wp-config.php"] [unique_id "avKgS8lLliOJozCjqqEbegAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:52:06
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:51:58.198178 2026] [security2:error] [pid 7760:tid 7760] [client 172.71.164.112:10518] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:51:58.198178 2026] [security2:error] [pid 7760:tid 7760] [client 172.71.164.112:10518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "closedfortheseason.com"] [uri "/wp-config.php.old"] [unique_id "avKGzjs9ILhgYAzbVsm4wgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-09 11:34:26
UTC ·
(19 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T11:31:35.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 16:54:18
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:54:11.669216 2026] [security2:error] [pid 15978:tid 15978] [client 172.71.164.112:13276] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:54:11.669216 2026] [security2:error] [pid 15978:tid 15978] [client 172.71.164.112:13276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.tucek.org"] [uri "/wp-config.php.bak"] [unique_id "au4GM3OKDGAUJW0cAFlASAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 05:17:26
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 00:17:20.224023 2026] [security2:error] [pid 21810:tid 21829] [client 172.71.164.112:13466] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 00:17:20.224023 2026] [security2:error] [pid 21810:tid 21829] [client 172.71.164.112:13466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gestorialuengo.com"] [uri "/.env.dev"] [unique_id "auwRYIRI77f44CW3ZPGF9gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
abuseiphack
2026-11-03 01:04:51
UTC ·
(1 week ago)
Automatic report for brute force attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-02 09:31:50
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 04:31:33.207416 2026] [security2:error] [pid 26010:tid 26010] [client 172.71.164.112:12040] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 04:31:33.207416 2026] [security2:error] [pid 26010:tid 26010] [client 172.71.164.112:12040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krakowski.org"] [uri "/.git/config"] [unique_id "auhYdWLnzblhquCY4Y1WgwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-11-01 14:18:35
UTC ·
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 10:50:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 05:50:09.637551 2026] [security2:error] [pid 6033:tid 6066] [client 172.71.164.112:11749] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 05:50:09.637551 2026] [security2:error] [pid 6033:tid 6066] [client 172.71.164.112:11749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trejbal.com"] [uri "/.env.backup"] [unique_id "aucZYcLJQOZBYg7wJE5xVgAAARE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-11-01 09:57:30
UTC ·
(1 week ago)
Web App Attack
🇩🇪
kwnshkn
2026-11-01 02:14:10
UTC ·
(1 week ago)
Web exploit probe (/wp-admin/install.php?step=1)
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-30 07:21:14
UTC ·
(1 week ago)
Multiple WAF Violations
Web App Attack
🇩🇪
abdubhai
2026-10-25 12:24:51
UTC ·
(2 weeks ago)
172.71.164.112 - - [25/Oct/2026:
...
Brute-Force
🇫🇷
dynamix
2026-10-25 05:43:47
UTC ·
(2 weeks ago)
Multiple WAF Violations
Web App Attack
