🇺🇸
TPI-Abuse
2026-05-15 10:26:24
UTC ·
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 06:26:14.204229 2026] [security2:error] [pid 10126:tid 10126] [client 149.143.137.43:37781] ...
show more
(mod_security) mod_security (id:210730) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 06:26:14.204229 2026] [security2:error] [pid 10126:tid 10126] [client 149.143.137.43:37781] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ionekotis.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ionekotis.net"] [uri "/db.sql"] [unique_id "agb0xvgACG90sPQEYKCCVwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 08:34:21
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:34:01.510243 2026] [security2:error] [pid 13342:tid 13342] [client 149.143.137.43:50253] ...
show more
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:34:01.510243 2026] [security2:error] [pid 13342:tid 13342] [client 149.143.137.43:50253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.franklycommerce.springmeadowventures.com"] [uri "/.env.testing"] [unique_id "agbaeXXIpnga-6mcgl7pDgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 08:05:05
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:04:55.712589 2026] [security2:error] [pid 3880:tid 3880] [client 149.143.137.43:44019] M ...
show more
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:04:55.712589 2026] [security2:error] [pid 3880:tid 3880] [client 149.143.137.43:44019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.awcadvocate.com"] [uri "/.htpasswd"] [unique_id "agbTp6oVOBH50ckLINzqDwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 07:39:57
UTC ·
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:39:53.987995 2026] [security2:error] [pid 12283:tid 12283] [client 149.143.137.43:47573] ...
show more
(mod_security) mod_security (id:210730) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:39:53.987995 2026] [security2:error] [pid 12283:tid 12283] [client 149.143.137.43:47573] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cabwebs.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cabwebs.com"] [uri "/s3.key"] [unique_id "agbNya3_KWoPx0pXxpvSrwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-05-15 04:04:13
UTC ·
(5 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 149.143.137.43 (US/United States/-): 1 in the last 3600 secs (0-197)
Hacking
🇺🇸
TPI-Abuse
2026-05-14 09:49:58
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 05:49:43.987125 2026] [security2:error] [pid 17513:tid 17555] [client 149.143.137.43:46495] ...
show more
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 05:49:43.987125 2026] [security2:error] [pid 17513:tid 17555] [client 149.143.137.43:46495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.absurdotron.com"] [uri "/.env.old"] [unique_id "agWat0Iafzn45pyUqVF_AwAAAIE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 16:46:14
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 12:45:41.090934 2026] [security2:error] [pid 669:tid 669] [client 149.143.137.43:37597] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 12:45:41.090934 2026] [security2:error] [pid 669:tid 669] [client 149.143.137.43:37597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.yuanwei.l3l4.com"] [uri "/.git/objects/"] [unique_id "agNZNe3TxWTXe1srFDco6AAAADk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 13:52:51
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 09:52:18.782582 2026] [security2:error] [pid 12301:tid 12301] [client 149.143.137.43:39917] ...
show more
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 09:52:18.782582 2026] [security2:error] [pid 12301:tid 12301] [client 149.143.137.43:39917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peanutcarvings.com"] [uri "/wp-config.php.bak"] [unique_id "agMwkpJQnDjSatW2yB9l9wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-11 20:00:44
UTC ·
(6 months ago)
PSCSERV WPSCAN 149.143.137.43
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 22:01:53
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 18:01:25.465313 2026] [security2:error] [pid 9701:tid 9701] [client 149.143.137.43:36169] M ...
show more
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 18:01:25.465313 2026] [security2:error] [pid 9701:tid 9701] [client 149.143.137.43:36169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.old.renju.net"] [uri "/.git/HEAD"] [unique_id "af-utcJ3TQ7vYUuPhXM2JQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-09 14:44:05
UTC ·
(6 months ago)
(caddyscan) Scanner path probe from 149.143.137.43 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 0 149.143.137.43 - - [09/May/2026:13:44:08 +0000] "HEAD /.env.swp HTTP/1.1"
...
show more
(caddyscan) Scanner path probe from 149.143.137.43 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 0 149.143.137.43 - - [09/May/2026:13:44:08 +0000] "HEAD /.env.swp HTTP/1.1"
[REDACTED] 200 2627 149.143.137.43 - - [09/May/2026:14:16:55 +0000] "GET /.env.sample HTTP/1.1"
[REDACTED] 200 2627 149.143.137.43 - - [09/May/2026:14:16:58 +0000] "GET /.env.backup HTTP/1.1"
[REDACTED] 200 2627 149.143.137.43 - - [09/May/2026:14:44:04 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 149.143.137.43 - - [09/May/2026:14:44:04 +0000] "GET /.env~ HTTP/1.1"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-05-08 19:21:35
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 15:20:50.770363 2026] [security2:error] [pid 17492:tid 17492] [client 149.143.137.43:43673] ...
show more
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 15:20:50.770363 2026] [security2:error] [pid 17492:tid 17492] [client 149.143.137.43:43673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ficklepassionproductions.com"] [uri "/.env.local.php"] [unique_id "af43kjeHorXcv45on0f8KQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
impra
2026-05-08 00:52:03
UTC ·
(6 months ago)
Detected 5 connection attempts.
Port Scan
Hacking
Web App Attack
🇨🇴
adalbertoreyes.org
2026-05-07 22:43:02
UTC ·
(6 months ago)
CategoryPortScan
Port Scan
🇺🇸
TPI-Abuse
2026-05-07 17:08:33
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 13:08:14.952305 2026] [security2:error] [pid 10262:tid 10262] [client 149.143.137.43:51803] ...
show more
(mod_security) mod_security (id:210492) triggered by 149.143.137.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 13:08:14.952305 2026] [security2:error] [pid 10262:tid 10262] [client 149.143.137.43:51803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "phuketyachtrentals.com.phuket-boatcharter.com"] [uri "/.env.example"] [unique_id "afzG_txNv3VuNKj0lonwYgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack