🇫🇷
dynamix
2026-10-21 11:50:54
(1 hour ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 15:18:07
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 11:18:02.175835 2026] [security2:error] [pid 22052:tid 22052] [client 172.71.172.159:12542] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.handi-finder.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.handi-finder.com"] [uri "/handi-finder.sql"] [unique_id "atTjKnro7fko0XGCP56ODQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 13:10:59
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:10:51.134402 2026] [security2:error] [pid 2978:tid 2978] [client 172.71.172.159:13942] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||leewis.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "leewis.com"] [uri "/rezerv.sql"] [unique_id "atTFW0Lec_yuIF5uQgALvgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 08:06:12
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 04:06:08.097832 2026] [security2:error] [pid 11890:tid 11890] [client 172.71.172.159:13431] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||webersource.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "webersource.com"] [uri "/webersource.com.sql"] [unique_id "atR98Lthey_FrQOfw4zrygAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 06:37:07
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:37:00.683793 2026] [security2:error] [pid 21748:tid 21748] [client 172.71.172.159:11543] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ingberinteriors.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ingberinteriors.com"] [uri "/ingberinteriors.com.sql"] [unique_id "atRpDFMz-U1svF8mnPNxaAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 03:27:25
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:27:20.196494 2026] [security2:error] [pid 10153:tid 10172] [client 172.71.172.159:11549] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||alexlogic.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alexlogic.com"] [uri "/rezerv.sql"] [unique_id "atQ8mARgOXQwTgFWwxslfwAAAE4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 01:20:21
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:20:14.032816 2026] [security2:error] [pid 26199:tid 26199] [client 172.71.172.159:12724] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||schonar.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "schonar.com"] [uri "/schonar.sql"] [unique_id "atQezi5rK0PUy-M1ge-XYwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-17 22:32:04
(3 days ago)
[18/Oct/2026:01:32:03 +0300] -- 172.71.172.159 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[18/Oct/2026:01:32:03 +0300] -- 172.71.172.159 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /admin/config.php.bak HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 20:08:50
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 16:08:45.572526 2026] [security2:error] [pid 30223:tid 30223] [client 172.71.172.159:13567] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||isabellapenalo.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "isabellapenalo.com"] [uri "/backup.sql"] [unique_id "atPVzXrE8A13QU4jmzm6KgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-15 01:05:56
(6 days ago)
[15/Oct/2026:04:05:56 +0300] -- 172.71.172.159 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[15/Oct/2026:04:05:56 +0300] -- 172.71.172.159 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /rezerv.zip HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-14 09:07:39
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 02:41:50
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 22:41:43.934798 2026] [security2:error] [pid 29653:tid 29653] [client 172.71.172.159:9546] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||conservadordehualpen.cl|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "conservadordehualpen.cl"] [uri "/database.sql"] [unique_id "as7r55Kp4ojfhULlmiXe3AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-09 04:45:31
(1 week ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-01 07:43:03
(2 weeks ago)
Web App Attack
🇧🇪
madeit
2026-08-14 09:54:59
(2 months ago)
Web App Attack
