๐ซ๐ท
dynamix
2026-10-19 09:27:30
(17 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-10-18 10:44:03
(1 day ago)
[18/Oct/2026:13:44:03 +0300] -- 172.71.164.66 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET / ...
show more
[18/Oct/2026:13:44:03 +0300] -- 172.71.164.66 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /rezerv.zip HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 06:57:51
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:57:40.565578 2026] [security2:error] [pid 14952:tid 14959] [client 172.71.164.66:10339] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||newleafpro.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "newleafpro.com"] [uri "/newleafpro.com.sql"] [unique_id "atRt5LrW5sgWucJD-rzh8AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 06:21:18
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:21:11.581962 2026] [security2:error] [pid 26175:tid 26175] [client 172.71.164.66:10022] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||talentguard.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "talentguard.net"] [uri "/talentguard.sql"] [unique_id "atRlV5DOvcx2spSkNiu74wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 03:29:37
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:29:30.201316 2026] [security2:error] [pid 2423:tid 2423] [client 172.71.164.66:12665] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sidegigfab.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sidegigfab.com"] [uri "/config.php.bak"] [unique_id "atQ9Gi6Yen-arKfWSFicPwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 03:13:31
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:13:24.325609 2026] [security2:error] [pid 19656:tid 19656] [client 172.71.164.66:10860] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.ourdailybroad.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ourdailybroad.com"] [uri "/rezerv.sql"] [unique_id "atQ5VE_NxTEbE6nZ7mX6vwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-17 23:27:35
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-10-17 22:27:11
(2 days ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-17 21:22:25
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 17:22:17.490302 2026] [security2:error] [pid 28605:tid 28605] [client 172.71.164.66:9853] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||teenaarunoceans.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "teenaarunoceans.com"] [uri "/admin/config.php.bak"] [unique_id "atPnCWwdnHENV0H4r3J1TQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-17 19:58:00
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 15:57:51.096059 2026] [security2:error] [pid 27035:tid 27035] [client 172.71.164.66:10900] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.rentkase.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.rentkase.com"] [uri "/rezerv.sql"] [unique_id "atPTPy5y2NtfBqA3IdXwMQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 05:21:35
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 01:21:26.027659 2026] [security2:error] [pid 21198:tid 21198] [client 172.71.164.66:9517] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||trompelart.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "trompelart.com"] [uri "/database.sql"] [unique_id "as8RVsQmWxvLTRZSgKs9VgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 02:38:12
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 22:38:07.919222 2026] [security2:error] [pid 395:tid 395] [client 172.71.164.66:10414] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||miranda-race-walks.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "miranda-race-walks.com"] [uri "/rezerv.sql"] [unique_id "as7rD7rHd9REFenySZ8uTAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 23:06:09
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.164.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:06:00.624089 2026] [security2:error] [pid 20674:tid 20674] [client 172.71.164.66:9835] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||generationedm.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "generationedm.com"] [uri "/admin/config.php.bak"] [unique_id "as65WKplStXYhFgwAmtWnwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-10-03 21:48:27
(2 weeks ago)
Web App Attack
๐น๐ท
crnpekgoz
2026-10-02 17:35:26
(2 weeks ago)
Malicious HTTP GET request for '/.git/config' (HTTP 404) from 172.71.164.66. Threat: Web Gรผvenlik Aรง ...
show more
Malicious HTTP GET request for '/.git/config' (HTTP 404) from 172.71.164.66. Threat: Web Gรผvenlik Aรงฤฑฤฤฑ Taramasฤฑ (.env/bot). Blocked by WardenGuard Web Shield.
show less
Web App Attack
