🇫🇮
abdubhai
2026-10-19 09:57:28
(6 hours ago)
172.71.172.104 - - [19/Oct/2026:
...
Brute-Force
🇫🇷
dynamix
2026-10-18 19:23:48
(21 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
craudiovizai
2026-10-18 18:30:37
(22 hours ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. ...
show more
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
show less
Web App Attack
Bad Web Bot
🇩🇪
altenglaner
2026-10-18 14:05:55
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 13:15:11
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:15:04.778919 2026] [security2:error] [pid 16814:tid 16814] [client 172.71.172.104:12601] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||techsuite7.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "techsuite7.net"] [uri "/db.sql"] [unique_id "atTGWP7ExNVMbu8wa409MgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 11:57:07
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 07:56:59.306567 2026] [security2:error] [pid 3255:tid 3255] [client 172.71.172.104:13161] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mrsreclamation.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mrsreclamation.com"] [uri "/rezerv.sql"] [unique_id "atS0C7_M4dgTNy3Lol2R3gAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 03:06:17
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:06:14.121418 2026] [security2:error] [pid 15620:tid 15620] [client 172.71.172.104:10966] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||suffecool.suffe.cool|F|2"] [data ".suffe.cool.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "suffecool.suffe.cool"] [uri "/suffecool.suffe.cool.sql"] [unique_id "atQ3pmlU6vfMAmyHX_mFkQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 02:15:56
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 22:15:49.919963 2026] [security2:error] [pid 15137:tid 15137] [client 172.71.172.104:13811] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||thegoldentether.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thegoldentether.com"] [uri "/database.sql"] [unique_id "atQr1YIqjMFW9TFdvxLOYQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 00:23:36
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:23:33.267353 2026] [security2:error] [pid 15506:tid 15506] [client 172.71.172.104:12381] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||pschitchat.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pschitchat.com"] [uri "/pschitchat.sql"] [unique_id "atQRhQBhxt4HpbX_mbx3DAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 23:54:19
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 19:54:11.979254 2026] [security2:error] [pid 12873:tid 12873] [client 172.71.172.104:10239] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||platinumkissband.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "platinumkissband.com"] [uri "/rezerv.sql"] [unique_id "atQKo7EOOwlV7hHVW6RdAQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 22:07:39
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 18:07:30.938441 2026] [security2:error] [pid 20431:tid 20431] [client 172.71.172.104:13142] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jdmicons.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jdmicons.com"] [uri "/backup.sql"] [unique_id "atPxosrNfDYKyxwbjcMeVgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-17 21:38:35
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 02:55:35
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 22:55:29.018565 2026] [security2:error] [pid 3003:tid 3003] [client 172.71.172.104:11997] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||murpf.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "murpf.com"] [uri "/db.sql"] [unique_id "atBAoftqjLpRahXPpdzgxwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Tamsy
2026-10-15 02:26:28
(4 days ago)
HTTPD - 4xx scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 15:20:42
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 11:20:37.995847 2026] [security2:error] [pid 25463:tid 25463] [client 172.71.172.104:10820] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lightupaustralia.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lightupaustralia.org"] [uri "/lightupaustralia.sql"] [unique_id "as-dxR53Uml_AEIOTk9-bgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
