🇺🇸
TPI-Abuse
2026-06-03 08:54:44
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 45.136.26.115 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.136.26.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 04:54:37.744678 2026] [security2:error] [pid 16322:tid 16322] [client 45.136.26.115:47999] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Scooters/Liteway/Thumbs.db"] [unique_id "ah_rzXGa5vu4Bt2uvg9dKgAAABM"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Scooters/Liteway/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 14:41:46
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.136.26.115 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.136.26.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 10:41:39.061117 2026] [security2:error] [pid 10598:tid 10612] [client 45.136.26.115:10699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lamcohomecare.com"] [uri "/wp-config.php.bak"] [unique_id "ahBrI_pAWSZLuuq47sbH2QAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 18:40:16
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.136.26.115 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.136.26.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 14:40:12.151585 2026] [security2:error] [pid 8994:tid 8994] [client 45.136.26.115:59267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fatcavestudios.com"] [uri "/wp-config.txt"] [unique_id "ag9RjKToZuDLXOUG1mJP1wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-05-21 15:04:02
(2 weeks ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -58.493 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -58.493 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.2148.1
show less
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-20 20:03:53
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 45.136.26.115 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.136.26.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 16:03:45.747850 2026] [security2:error] [pid 28380:tid 28380] [client 45.136.26.115:45281] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dpcfab.com|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dpcfab.com"] [uri "/wp-config.inc"] [unique_id "ag4ToUS9iT9h_xa3Fw2ykAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 19:16:43
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 45.136.26.115 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.136.26.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 15:16:39.777739 2026] [security2:error] [pid 28929:tid 28929] [client 45.136.26.115:40269] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mosheimlib.org|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mosheimlib.org"] [uri "/wp-config.inc"] [unique_id "ag4Il_rwbeFvqIGSsfQRewAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-05-18 08:42:01
(2 weeks ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇫🇷
COMAITE
2026-05-18 01:11:28
(2 weeks ago)
Suspicious URL access.
Web App Attack
2026-05-04 08:17:16
(1 month ago)
45.136.26.115 - - [04/May/2026:16:17:15 +0800] "GET /wp-config.php.save HTTP/1.1" 301 - "-" "Mozilla ...
show more
45.136.26.115 - - [04/May/2026:16:17:15 +0800] "GET /wp-config.php.save HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-04-17 03:06:01
(1 month ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇪🇸
masterguru
2026-04-16 17:29:52
(1 month ago)
COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operato ...
show more
COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. (225170-123)
show less
Hacking
Web App Attack
🇫🇷
masterguru
2026-04-16 01:37:22
(1 month ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)
Hacking
🇺🇸
antlac1
2026-04-15 05:12:00
(1 month ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇺🇸
ANTI SCANNER
2026-03-31 05:00:55
(2 months ago)
Scanner : /xmlrpc.php
Web Spam
🇳🇱
i-turnradio.nl
2026-03-26 15:39:53
(2 months ago)
2026-03-26 @ 16:39:53 (CET) ~ Blocked for trying to access: /xmlrpc.php
Web App Attack