🇺🇸
TPI-Abuse
2026-10-18 03:17:22
(1 minute ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:17:12.728530 2026] [security2:error] [pid 32445:tid 32445] [client 172.71.164.169:12277] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||levijoneslegal.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "levijoneslegal.com"] [uri "/config.php.bak"] [unique_id "atQ6OKz8WMsdMPfuqyOhjwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 02:15:26
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 22:15:23.424145 2026] [security2:error] [pid 14060:tid 14060] [client 172.71.164.169:10361] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.echandi.navarrete.ws|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.echandi.navarrete.ws"] [uri "/database.sql"] [unique_id "atQru-9P_cIlPldimX-__gAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 01:36:33
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:36:28.043384 2026] [security2:error] [pid 12779:tid 12779] [client 172.71.164.169:10001] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mrgutierrezshow.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mrgutierrezshow.com"] [uri "/database.sql"] [unique_id "atQinKHJhkyNjawfEGUCywAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 01:08:44
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:08:37.024632 2026] [security2:error] [pid 18261:tid 18261] [client 172.71.164.169:12358] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cityslickerstomp.info|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cityslickerstomp.info"] [uri "/database.sql"] [unique_id "atQcFXQO6npG5A0RFYVQRgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 22:59:48
(4 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 18:59:41.884855 2026] [security2:error] [pid 2389:tid 2389] [client 172.71.164.169:13197] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||deafinitely.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "deafinitely.com"] [uri "/db.sql"] [unique_id "atP93SzTh4TgKoiGGFemFAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-17 04:44:32
(22 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 03:31:06
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 23:30:58.860775 2026] [security2:error] [pid 1162:tid 1187] [client 172.71.164.169:14328] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||joshuapaulweckesser.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "joshuapaulweckesser.com"] [uri "/admin/config.php.bak"] [unique_id "atBI8uJzp_68XPqTS-PZuQAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-14 20:31:18
(3 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 03:27:34
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 23:27:24.512851 2026] [security2:error] [pid 22073:tid 22073] [client 172.71.164.169:11295] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindforestmovie.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindforestmovie.com"] [uri "/db.sql"] [unique_id "as72nK0U2S4mWtyoi7wRKQAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 23:47:22
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:47:19.683166 2026] [security2:error] [pid 29049:tid 29049] [client 172.71.164.169:12523] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.barillaequipment.com|F|2"] [data ".barillaequipment.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.barillaequipment.com"] [uri "/mail.barillaequipment.com.sql"] [unique_id "as7DB6wWhOH6bheRwxFI2QAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:06:28
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:06:22.194117 2026] [security2:error] [pid 26893:tid 26893] [client 172.71.164.169:12279] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.majesticsolutions.co|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.majesticsolutions.co"] [uri "/backup.sql"] [unique_id "as6rXqZpV1V1nFQR1itWxgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-02 05:54:36
(2 weeks ago)
Web App Attack
🇩🇪
anycast_ac
2026-08-30 08:01:10
(1 month ago)
[WebProtection] L4/L7 attack source · L4-22-GLOBAL-FLOOD · 5 hits/window
DDoS Attack
🇧🇪
madeit
2026-08-29 17:26:21
(1 month ago)
Web App Attack
🇨🇿
Prcek
2026-08-28 21:00:47
(1 month ago)
PortScan:HOST=172.71.164.169,DPORTS=443
Port Scan
