🇺🇸
TPI-Abuse
2026-10-14 03:43:03
(12 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 23:42:52.608120 2026] [security2:error] [pid 28017:tid 28033] [client 172.71.172.171:12492] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.luxury.management|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.luxury.management"] [uri "/dump.sql"] [unique_id "as76PJeABireJCfck5D8VQAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 02:02:55
(14 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 22:02:49.849057 2026] [security2:error] [pid 5261:tid 5261] [client 172.71.172.171:12803] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hughhart.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hughhart.com"] [uri "/hughhart.com.sql"] [unique_id "as7iyT-Ev-oc7mWKAsAx4AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-01 09:54:04
(1 week ago)
Web App Attack
🇧🇪
madeit
2026-09-03 06:42:12
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 05:20:15
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.172.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.172.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:20:07.075214 2026] [security2:error] [pid 18752:tid 18752] [client 172.71.172.171:11459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brainwavecenters.com"] [uri "/.git/config"] [unique_id "apZgh0a5ALl2xqjio_sRYgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
www.mammazone.it
2026-08-12 05:35:36
(2 months ago)
[Wed Aug 12 07:35:35.851343 2026] [proxy_fcgi:error] [pid 2424118] [client 172.71.172.171:11265] AH0 ...
show more
[Wed Aug 12 07:35:35.851343 2026] [proxy_fcgi:error] [pid 2424118] [client 172.71.172.171:11265] AH01071: Got error 'Primary script unknown'
[Wed Aug 12 07:35:35.938833 2026] [proxy_fcgi:error] [pid 2424118] [client 172.71.172.171:11265] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
🇲🇽
octageeks.com
2026-07-31 04:21:48
(2 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇩🇪
pltcldvlpr
2026-07-18 00:49:05
(2 months ago)
CMS/framework probe: 172.71.172.171 - - [18/Jul/2026:02:49:04 +0200] "GET /.env.local HTTP/2.0" 404 ...
show more
CMS/framework probe: 172.71.172.171 - - [18/Jul/2026:02:49:04 +0200] "GET /.env.local HTTP/2.0" 404 10607 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" asn=13335 org="Cloudflare, Inc." country=DE
...
show less
Web App Attack
🇷🇺
DZBOT
2026-07-13 19:23:21
(3 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 12:16:42
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.172.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.172.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 08:16:37.164123 2026] [security2:error] [pid 1532:tid 1532] [client 172.71.172.171:14130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justiart.com"] [uri "/.git/config"] [unique_id "akZWpcvJDSCcCgc-AhXsbAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 10:49:35
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.172.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.172.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 06:49:30.452464 2026] [security2:error] [pid 6098:tid 6098] [client 172.71.172.171:10492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.alsetsystems.com"] [uri "/.git/config"] [unique_id "akZCOhHaMm8yCXZhSkKnjAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-06-13 06:49:05
(4 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
xxkodedxx
2026-06-11 03:37:10
(4 months ago)
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1× edge-block in 10 ...
show more
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1× edge-block in 10m window.
Origin: DE / AS13335 Cloudflare, Inc.
Active: 03:36:14 UTC
Volume: 1 HTTP req
Probed: /wp-admin/install.php?step=1
Status mix: 444×1
UA: "http://ztx-lab.com/wp-admin/install.php?step=1"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-04 09:59:34
(4 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 10:23:56
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.172.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.172.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 06:23:52.922260 2026] [security2:error] [pid 8709:tid 8709] [client 172.71.172.171:9686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deltasouls.com"] [uri "/.git/config"] [unique_id "ah6vOKcKr7OjZqvAxkjXpAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
