🇺🇸
TPI-Abuse
2026-11-14 22:03:02
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:02:53.122062 2026] [security2:error] [pid 7864:tid 7864] [client 172.71.164.203:13306] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:02:53.122062 2026] [security2:error] [pid 7864:tid 7864] [client 172.71.164.203:13306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "veteranowned.us"] [uri "/wp-config.php.old"] [unique_id "avjajchvvjXJJ3N0b0R8RgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
TheCoon
2026-11-13 07:10:30
UTC ·
(2 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-12 13:53:21
UTC ·
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:53:16.518358 2026] [security2:error] [pid 16766:tid 16766] [client 172.71.164.203:13944] ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:53:16.518358 2026] [security2:error] [pid 16766:tid 16766] [client 172.71.164.203:13944] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||camerongunsmith.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "camerongunsmith.com"] [uri "/index.php.bak"] [unique_id "avXEzHM7m3LT7_KVRZ5_qgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 09:01:38
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:01:32.170204 2026] [security2:error] [pid 23332:tid 23332] [client 172.71.164.203:13049] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:01:32.170204 2026] [security2:error] [pid 23332:tid 23332] [client 172.71.164.203:13049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ohwaitiforgot.com"] [uri "/.htaccess"] [unique_id "avQu7GsPNU0BOD8U-FvTcQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 12:26:39
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:26:32.536823 2026] [security2:error] [pid 11087:tid 11087] [client 172.71.164.203:14076] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:26:32.536823 2026] [security2:error] [pid 11087:tid 11087] [client 172.71.164.203:14076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "naomipyle.com"] [uri "/wp-config.php.old"] [unique_id "avMNeHeCJu4f0s_N4F66HwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 12:07:35
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:07:30.512047 2026] [security2:error] [pid 23056:tid 23056] [client 172.71.164.203:9575] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:07:30.512047 2026] [security2:error] [pid 23056:tid 23056] [client 172.71.164.203:9575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sanesoftware.com"] [uri "/wp-config.php"] [unique_id "avMJAkeLi0tczqqmbPGjcAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 11:35:28
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:35:22.179305 2026] [security2:error] [pid 21565:tid 21565] [client 172.71.164.203:11960] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:35:22.179305 2026] [security2:error] [pid 21565:tid 21565] [client 172.71.164.203:11960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abchessboards.com"] [uri "/.htaccess"] [unique_id "avMBejptnYsCP-47B2fA6AAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-09 01:20:34
UTC ·
(6 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-11-09 00:47:42
UTC ·
(6 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇨🇭
TheCoon
2026-11-08 10:56:57
UTC ·
(1 week ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
2026-11-07 13:08:00
UTC ·
(1 week ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 04:21:52
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 23:21:42.573118 2026] [security2:error] [pid 7550:tid 7550] [client 172.71.164.203:9646] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 23:21:42.573118 2026] [security2:error] [pid 7550:tid 7550] [client 172.71.164.203:9646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.studioyau.com"] [uri "/.env.production"] [unique_id "au6nVqXjYca3lWT6S_8vRgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-11-06 20:16:36
UTC ·
(1 week ago)
{"level":"info","ts":1793996195.635881,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"172.71.164.203","remote_port":"9431","client_ip":"172.71.164.203","proto":"HTTP/1.1","method":"GET","host":"status.bbsltn.com","uri ...
show more
{"level":"info","ts":1793996195.635881,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"172.71.164.203","remote_port":"9431","client_ip":"172.71.164.203","proto":"HTTP/1.1","method":"GET","host":"status.bbsltn.com","uri":"/_debugbar/open","headers":{"X-Proxyuser-Ip":["10.62.148.212"],"X-Forwarded-Proto":["https"],"Connection":["Keep-Alive"],"X-Nextjs-Data":["1"],"X-Remote-Ip":["10.62.148.212"],"X-Forwarded-For":["10.62.148.212,34.185.249.91"],"X-Client-Ip":["10.62.148.212"],"X-Originating-Ip":["10.62.148.212"],"Accept":["*/*"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"Cluster-Client-Ip":["10.62.148.212"],"True-Client-Ip":["10.62.148.212"],"Cdn-Loop":["cloudflare; loops=1"],"X-Remote-Addr":["10.62.148.212"],"Forwarded":["for=10.62.148.212"],"X-Custom-Ip-Authorization":["10.62.148.212"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"],"Cf-Connecting-Ip":["34.185.249.91"],"Accept-En
...
show less
DDoS Attack
Web App Attack
🇫🇷
dynamix
2026-11-06 17:31:10
UTC ·
(1 week ago)
Multiple WAF Violations
Web App Attack
2026-11-06 07:06:08
UTC ·
(1 week ago)
Trying to access config files
Web App Attack
