🇺🇸
TPI-Abuse
2026-10-19 22:11:23
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 18:11:16.182245 2026] [security2:error] [pid 8446:tid 8446] [client 150.158.144.186:48598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daveclick.com"] [uri "/.env"] [unique_id "ataVhL-s4slL_GhWsiTOrQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 21:08:03
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 17:07:56.630860 2026] [security2:error] [pid 18036:tid 18036] [client 150.158.144.186:59758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bostonmarathonstories.com"] [uri "/.env"] [unique_id "ataGrFB8S6nKJaLwz1NGrQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-19 19:16:03
(3 days ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 17:13:03
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 13:12:57.598358 2026] [security2:error] [pid 14564:tid 14564] [client 150.158.144.186:52974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ds12bonn.de"] [uri "/.env"] [unique_id "atZPmdY4a2KBrmvY9VMZwwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 09:02:50
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 05:02:46.070956 2026] [security2:error] [pid 1604:tid 1604] [client 150.158.144.186:36776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bamedica.com"] [uri "/.env"] [unique_id "atXcttA0HZDB9pO0faYT3QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-10-16 22:39:40
(6 days ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -48.794 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -48.794 (Bad < -10 / Very Bad < -20 / Extreme < -35)
show less
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-22 23:42:52
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 19:42:46.118197 2026] [security2:error] [pid 19336:tid 19363] [client 150.158.144.186:47076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kd9uri.com"] [uri "/wp-config.php.bak"] [unique_id "arMSdu3FQGqxD8ZsCrL83gAAAU8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 22:45:43
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 18:45:35.848005 2026] [security2:error] [pid 2527:tid 2527] [client 150.158.144.186:40514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puckerbottombikini.com"] [uri "/wp-config.php.bak"] [unique_id "arMFDwWLNJXgmgxTSLQkEwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:04:24
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:04:18.681864 2026] [security2:error] [pid 11311:tid 11311] [client 150.158.144.186:58278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chrismoratz.com"] [uri "/wp-config.php.bak"] [unique_id "arLRMiVB_ODz3lOfowXthwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:13:39
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:13:32.208459 2026] [security2:error] [pid 1402:tid 1402] [client 150.158.144.186:33614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "haroparquet.com"] [uri "/wp-config.php.bak"] [unique_id "arK3POHSTr-owGqdbUrXFwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:42:02
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:41:55.040302 2026] [security2:error] [pid 28450:tid 28450] [client 150.158.144.186:44282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rondrez.com"] [uri "/wp-config.php.bak"] [unique_id "arKhw-720_1x1tzVI7ypqQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 01:55:28
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 21:55:21.180603 2026] [security2:error] [pid 1501:tid 1501] [client 150.158.144.186:58008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "waxjet510.com"] [uri "/.env"] [unique_id "arHgCcNRWf2wQFqFjunGZwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Mr-Money
2025-08-20 02:22:20
(1 year ago)
150.158.144.186 - - [20/Aug/2025:04:22:19 +0200] "HEAD /new.zip HTTP/1.1" 404 124 "-" "-"
...
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-07-20 01:16:52
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 150.158.144.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 21:16:45.264119 2025] [security2:error] [pid 12658:tid 12658] [client 150.158.144.186:52466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tlphotogifts.com"] [uri "/wp-config.php_orig"] [unique_id "aHxDfXA5HrbxXsTG8kVN-gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
DocNetzwerk
2025-07-19 08:30:24
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted] 150.158.144.186 (CN/China/-)
SQL Injection