🇺🇸
TPI-Abuse
2026-03-03 04:36:57
(3 months ago)
(mod_security) mod_security (id:240000) triggered by 173.239.196.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 173.239.196.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 23:36:52.638795 2026] [security2:error] [pid 8905:tid 8905] [client 173.239.196.19:42307] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||wisdomsco.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "wisdomsco.com"] [uri "/images/stories/themes.php"] [unique_id "aaZlZM0wF_sTVitEtYYNVgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-03-02 23:36:47
(3 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-03-02 21:42:31
(3 months ago)
(mod_security) mod_security (id:240000) triggered by 173.239.196.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 173.239.196.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 16:42:23.042825 2026] [security2:error] [pid 21253:tid 21253] [client 173.239.196.19:21777] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||stsis.me|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "stsis.me"] [uri "/images/stories/themes.php"] [unique_id "aaYEP1CoBw5r3cDoHnkEOwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
artful
2026-02-23 13:17:00
(3 months ago)
Excessive errors, high load and multiple hits per second
Web App Attack
🇬🇧
consul.to
2026-02-23 11:18:21
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
2026-02-23 10:44:39
(3 months ago)
[redacted] 173.239.196.19 - - [23/Feb/2026:11:44:31 +0100] "GET /wp-admin/user/ HTTP/1.1" 404 236 "- ...
show more
[redacted] 173.239.196.19 - - [23/Feb/2026:11:44:31 +0100] "GET /wp-admin/user/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
[redacted] 173.239.196.19 - - [23/Feb/2026:11:44:34 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
[redacted] 173.239.196.19 - - [23/Feb/2026:11:44:34 +0100] "GET /admin/editor/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
[redacted] 173.239.196.19 - - [23/Feb/2026:11:44:34 +0100] "GET /admin/images/slider/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
[redacted] 173.239.196.19 - - [23/Feb/2026:11:44:34 +0100] "GET /admin/tmp/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64;
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 05:52:00
(3 months ago)
(mod_security) mod_security (id:240000) triggered by 173.239.196.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 173.239.196.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 00:51:52.699115 2026] [security2:error] [pid 9944:tid 9944] [client 173.239.196.19:26037] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||von-s.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "von-s.com"] [uri "/images/stories/themes.php"] [unique_id "aZvq-OiYxzeGSRbtQAi5OAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 04:34:03
(3 months ago)
(mod_security) mod_security (id:240000) triggered by 173.239.196.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 173.239.196.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 23:33:55.871484 2026] [security2:error] [pid 14260:tid 14260] [client 173.239.196.19:48701] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||deploy6tharmy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "deploy6tharmy.com"] [uri "/images/stories/themes.php"] [unique_id "aZvYs5brYL1_GO0jKcUZJwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ps-center
2026-02-22 20:12:49
(3 months ago)
C1: Web Attack GET /admin.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-02-21 18:59:53
(3 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇳🇿
Antinson
2026-02-21 17:37:03
(3 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇬🇧
consul.to
2026-02-18 16:44:55
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
2026-02-17 18:05:59
(3 months ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: SG, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: SG, Attack patterns: WordPress scanning, Webshell probing
show less
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-02-17 14:50:57
(3 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
2026-02-16 16:03:29
(3 months ago)
wordpress-trap
Web App Attack