🇺🇸
TPI-Abuse
2026-10-21 19:06:52
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 15:06:47.237338 2026] [security2:error] [pid 12020:tid 12020] [client 172.71.172.230:9571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "graphicsbyrc.zavijava.net"] [uri "/.git/config"] [unique_id "atkNRxtbz-BEXKi9tlxIIQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
langenkamp-media
2026-10-21 17:41:32
(5 hours ago)
Fail2Ban: Banned from jail nginx-nohome on 3dausdu.de
Web App Attack
🇫🇷
dynamix
2026-10-21 02:46:11
(20 hours ago)
Multiple WAF Violations
Web App Attack
🇩🇪
langenkamp-media
2026-10-19 01:10:33
(2 days ago)
Fail2Ban: Banned from jail nginx-nohome on 3dausdu.de
Web App Attack
2026-10-18 14:21:09
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 08:14:16
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 04:14:07.887336 2026] [security2:error] [pid 21105:tid 21105] [client 172.71.172.230:13425] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aes-nihil.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aes-nihil.com"] [uri "/database.sql"] [unique_id "atR_zxn9KnlbTug0DponZwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-18 07:06:40
(3 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 05:58:25
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 01:58:20.788271 2026] [security2:error] [pid 12799:tid 12799] [client 172.71.172.230:9568] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dogandponyband.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dogandponyband.com"] [uri "/config.php.bak"] [unique_id "atRf_FGGiRwW_8lGep0VJAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 00:34:29
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:34:21.777592 2026] [security2:error] [pid 27346:tid 27346] [client 172.71.172.230:10650] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||paleopathologist.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "paleopathologist.com"] [uri "/paleopathologist.com.sql"] [unique_id "atQUDTdaUC4UNHLwze0FxwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
langenkamp-media
2026-10-17 08:37:51
(4 days ago)
Fail2Ban: Banned from jail nginx-nohome on 3dausdu.de
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 03:59:18
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 23:59:14.102124 2026] [security2:error] [pid 28017:tid 28021] [client 172.71.172.230:13978] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dasperformance.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dasperformance.com"] [uri "/config.php.bak"] [unique_id "as7-EpeABireJCfck5AEPwAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 03:14:16
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 23:14:10.222698 2026] [security2:error] [pid 395:tid 395] [client 172.71.172.230:10140] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aksaltwatercharters.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aksaltwatercharters.com"] [uri "/dump.sql"] [unique_id "as7zgjGjSpnWW1MUGjrjLgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:30:01
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:29:54.772391 2026] [security2:error] [pid 20947:tid 20947] [client 172.71.172.230:13619] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||mitchellart.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mitchellart.com"] [uri "/database.sql"] [unique_id "as6w4kAKWuDkAnkNw6bGdAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-13 06:34:50
(1 week ago)
Scanner hitting /wp-admin/install.php?step=1 on narkow.dev (CLOUDFLARENET) — aaguard
Brute-Force
Port Scan
🇩🇪
FeG Deutschland
2026-10-13 05:58:45
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
