🇫🇷
Stara
2026-10-25 04:55:25
(4 hours ago)
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ...
show more
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja)
show less
Hacking
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-10-22 17:09:47
(2 days ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-21 01:16:13
(4 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 10:26:46
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:26:38.758946 2026] [security2:error] [pid 7531:tid 7531] [client 172.71.164.220:14138] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.landjudging.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.landjudging.com"] [uri "/db.sql"] [unique_id "atSe3gwXSGQvIwz9SENHwQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 07:33:49
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 03:33:34.263165 2026] [security2:error] [pid 12837:tid 12837] [client 172.71.164.220:12391] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rail-town.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rail-town.com"] [uri "/database.sql"] [unique_id "atR2Ttv1CdLWuOlXWSjYqgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 06:12:28
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:12:23.772672 2026] [security2:error] [pid 16902:tid 16902] [client 172.71.164.220:12664] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.birthplaceofprohockey.org|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.birthplaceofprohockey.org"] [uri "/admin/config.php.bak"] [unique_id "atRjR0SCCPXnDXTX1Be7WQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 05:15:54
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 01:15:50.714005 2026] [security2:error] [pid 29164:tid 29164] [client 172.71.164.220:9756] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||walkerweb.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "walkerweb.com"] [uri "/walkerweb.sql"] [unique_id "atRWBpduL9j77PM9kcnhCwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-18 05:10:06
(1 week ago)
Scanner hitting /wp-admin/install.php?step=1 on picsou.cloud (CLOUDFLARENET) — aaguard
Brute-Force
Port Scan
🇺🇸
TPI-Abuse
2026-10-18 03:17:25
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:17:14.374272 2026] [security2:error] [pid 4050:tid 4050] [client 172.71.164.220:11651] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||levijoneslegal.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "levijoneslegal.com"] [uri "/levijoneslegal.sql"] [unique_id "atQ6OgZy_TWLtrAQ-BNTtQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-18 01:30:26
(1 week ago)
[18/Oct/2026:04:30:25 +0300] -- 172.71.164.220 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[18/Oct/2026:04:30:25 +0300] -- 172.71.164.220 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /rezerv.zip HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 21:53:51
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 17:53:45.256030 2026] [security2:error] [pid 16615:tid 16615] [client 172.71.164.220:13482] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||scr-publications.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scr-publications.com"] [uri "/config.php.bak"] [unique_id "atPuaaosqwGfUX_5gRfNGAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 21:05:59
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 17:05:52.459659 2026] [security2:error] [pid 21959:tid 21959] [client 172.71.164.220:14306] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.soundtrax.net|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.soundtrax.net"] [uri "/admin/config.php.bak"] [unique_id "atPjMApNkm9AuWneC663-gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-17 00:04:21
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 01:36:37
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 21:36:31.645402 2026] [security2:error] [pid 29220:tid 29220] [client 172.71.164.220:13399] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.zoesaadeh.com.saadeh.ws|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.zoesaadeh.com.saadeh.ws"] [uri "/admin/config.php.bak"] [unique_id "as7cn9ago6pwT87rP5Z1JgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 00:34:16
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:34:07.099868 2026] [security2:error] [pid 32144:tid 32144] [client 172.71.164.220:12611] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gurpreetkhaira.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gurpreetkhaira.com"] [uri "/rezerv.sql"] [unique_id "as7N_8jVpoQyt-DbeBA3qAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
