🇺🇸
TPI-Abuse
2026-11-15 06:04:39
UTC ·
(22 minutes ago)
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 01:04:32.275966 2026] [security2:error] [pid 2234616:tid 2234616] [client 172.71.172.87:9412 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 01:04:32.275966 2026] [security2:error] [pid 2234616:tid 2234616] [client 172.71.172.87:9412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jacobyonline.com"] [uri "/wp-config.php.old"] [unique_id "avlLcA264v6yHOxmU--M0QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
TheCoon
2026-11-13 07:10:40
UTC ·
(1 day ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇧🇪
madeit
2026-11-12 05:26:49
UTC ·
(3 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 01:26:25
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:26:20.524327 2026] [security2:error] [pid 22441:tid 22441] [client 172.71.172.87:10549] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:26:20.524327 2026] [security2:error] [pid 22441:tid 22441] [client 172.71.172.87:10549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wmionline.org"] [uri "/wp-config.php"] [unique_id "avUVvOCrovTzrUt5w1Rx4AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 00:08:41
UTC ·
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 19:08:33.510113 2026] [security2:error] [pid 9655:tid 9677] [client 172.71.172.87:9761] ModS ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 19:08:33.510113 2026] [security2:error] [pid 9655:tid 9677] [client 172.71.172.87:9761] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||galenaproperties.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "galenaproperties.com"] [uri "/index.php.bak"] [unique_id "avUDgawCDtBAwUaT_NlDtgAAARE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:07:10
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:07:05.174876 2026] [security2:error] [pid 14557:tid 14557] [client 172.71.172.87:12112] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:07:05.174876 2026] [security2:error] [pid 14557:tid 14557] [client 172.71.172.87:12112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "texastraumarecovery.com"] [uri "/wp-config.php.bak"] [unique_id "avJuOaa44puSS3b6DulaUAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:04:03
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:03:55.479036 2026] [security2:error] [pid 9536:tid 9536] [client 172.71.172.87:14235] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:03:55.479036 2026] [security2:error] [pid 9536:tid 9536] [client 172.71.172.87:14235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vitalitywebb.com"] [uri "/wp-config.php"] [unique_id "avJfawyqylbUple-d_TxpgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:52:02
UTC ·
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:51:54.830266 2026] [security2:error] [pid 7600:tid 7600] [client 172.71.172.87:10383] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:51:54.830266 2026] [security2:error] [pid 7600:tid 7600] [client 172.71.172.87:10383] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||abchessboards.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "abchessboards.com"] [uri "/index.php.bak"] [unique_id "avHsGt9kbQ3iiZ3WMzxLAQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:13:21
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:13:14.189044 2026] [security2:error] [pid 15530:tid 15530] [client 172.71.172.87:14216] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:13:14.189044 2026] [security2:error] [pid 15530:tid 15530] [client 172.71.172.87:14216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "redweddingnapkins.com"] [uri "/.htaccess"] [unique_id "avCfmpbR2oC0iHAo-vDmfQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
TheCoon
2026-11-08 10:57:07
UTC ·
(6 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-07 21:54:33
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:54:26.183849 2026] [security2:error] [pid 27380:tid 27380] [client 172.71.172.87:11013] M ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:54:26.183849 2026] [security2:error] [pid 27380:tid 27380] [client 172.71.172.87:11013] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||starcrestsales.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "starcrestsales.com"] [uri "/index.php.bak"] [unique_id "au-eEkT02Tyc2XPMN8tORgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:16:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:16:10.976711 2026] [security2:error] [pid 12553:tid 12553] [client 172.71.172.87:10571] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:16:10.976711 2026] [security2:error] [pid 12553:tid 12553] [client 172.71.172.87:10571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bluesbluff.com"] [uri "/.git/config"] [unique_id "au1GehD5YcM6AdF2euysAwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 08:39:51
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 03:39:46.087973 2026] [security2:error] [pid 21596:tid 21645] [client 172.71.172.87:13384] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 03:39:46.087973 2026] [security2:error] [pid 21596:tid 21645] [client 172.71.172.87:13384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "siestakeybch.com"] [uri "/.git/config"] [unique_id "aurvUqV_3vl6QX7Dr3Iq6wAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-11-02 22:16:43
UTC ·
(1 week ago)
Scanning for exposed credentials and private keys.
Hacking
🇺🇸
TPI-Abuse
2026-11-02 21:57:33
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 16:57:27.073394 2026] [security2:error] [pid 31383:tid 31383] [client 172.71.172.87:13832] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.172.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 16:57:27.073394 2026] [security2:error] [pid 31383:tid 31383] [client 172.71.172.87:13832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialstudiesforkids.com"] [uri "/.env.local"] [unique_id "aukHR7FZ_b0mBAqc8eAungAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
