🇺🇸
TPI-Abuse
2025-12-14 18:57:09
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 13:57:04.428494 2025] [security2:error] [pid 11328:tid 11328] [client 182.96.163.45:50703] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||angelabcomics.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "angelabcomics.com"] [uri "/e/install/index.php.bak"] [unique_id "aT8IgJSgoRlVHkSWUmMInQAAAAY"], referer: http://angelabcomics.com/e/install/index.php.bak?enews=setdb&f=4
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2025-12-05 02:03:25
(10 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇸🇪
SkyDancer
2025-12-04 18:26:55
(10 months ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ...
show more
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
show less
Hacking
Brute-Force
🇳🇿
physke
2025-12-02 00:43:00
(10 months ago)
HACKER
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-01 14:20:51
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 09:20:45.432414 2025] [security2:error] [pid 2745503:tid 2745503] [client 182.96.163.45:55270] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.enfiestate.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.enfiestate.com"] [uri "/install/index.php.bak"] [unique_id "aS2kPe7l61XOaDVZerfemAAAAB0"], referer: http://www.enfiestate.com/install/index.php.bak?step=3&insLockfile=moonsec01.txt
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-01 07:50:55
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 02:50:46.994976 2025] [security2:error] [pid 3110:tid 3110] [client 182.96.163.45:58108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sf2g.com|F|2"] [data ".inc.php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sf2g.com"] [uri "/data/common.inc.php.bak"] [unique_id "aS1I1iSxehOtXMR0MiVx4AAAABc"], referer: http://www.wdu.com/data/common.inc.php.bak
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-23 22:01:03
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 17:00:57.691398 2025] [security2:error] [pid 3470286:tid 3470313] [client 182.96.163.45:5230] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||geoception.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "geoception.com"] [uri "/base/install/index.php.bak"] [unique_id "aSOEGcgcRcK3YY6Wjs4pqQAAAZU"], referer: http://geoception.com/base/install/index.php.bak
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-20 09:52:47
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 20 04:52:40.709123 2025] [security2:error] [pid 6681:tid 6681] [client 182.96.163.45:50378] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bradjohnsonqh.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bradjohnsonqh.com"] [uri "/install/index.php.bak"] [unique_id "aR7k6EQ_Ozz28aa279fxNwAAAAs"], referer: http://www.bradjohnsonqh.com/install/index.php.bak?step=11&insLockfile=a&s_lang=a&install_demo_name=../data/admin/config_update.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-09 19:58:59
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 14:58:51.973026 2025] [security2:error] [pid 21870:tid 21870] [client 182.96.163.45:5551] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vaxd.org|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vaxd.org"] [uri "/base/install/index.php.bak"] [unique_id "aRDye1XRm1isJ7Kbq1ZnVQAAAAk"], referer: http://vaxddoctors.com/base/install/index.php.bak
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-09 16:14:39
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 182.96.163.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 11:14:33.542366 2025] [security2:error] [pid 18393:tid 18393] [client 182.96.163.45:52391] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seniorservicetravel.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seniorservicetravel.com"] [uri "/base/install/index.php.bak"] [unique_id "aRC96bjQD11XKV8vrf8QbAAAAAk"], referer: http://seniorservicetravel.com/base/install/index.php.bak
show less
Brute-Force
Bad Web Bot
Web App Attack