🇺🇸
TPI-Abuse
2026-02-20 15:59:56
UTC ·
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 159.65.155.157 (hnweb.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 10:59:48.804124 2026] [security2:error] [pid 17992:tid 17992] [client 159.65.155.1 ...
show more
(mod_security) mod_security (id:210730) triggered by 159.65.155.157 (hnweb.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 10:59:48.804124 2026] [security2:error] [pid 17992:tid 17992] [client 159.65.155.157:47262] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||brianwhitty.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brianwhitty.com"] [uri "/php.bak"] [unique_id "aZiE9DrP1lBuPzYEs1pE6QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
entangled_mongoose
2026-02-19 13:18:23
UTC ·
(8 months ago)
Probed /wp-content.rar.
Web App Attack
🇳🇿
Antinson
2026-02-16 10:37:57
UTC ·
(8 months ago)
High error rate and elevated request volume targeting cPanel servers
Bad Web Bot
🇬🇧
consul.to
2026-02-14 19:37:35
UTC ·
(9 months ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
cg-design.co.uk
2026-02-14 02:34:27
UTC ·
(9 months ago)
(mod_security) mod_security triggered on hostname [redacted] 159.65.155.157 (IN/India/hnweb.site)
SQL Injection
🇹🇷
rtbh.com.tr
2026-02-13 20:11:35
UTC ·
(9 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇦🇺
screwlooseit.com.au
2026-02-13 13:00:26
UTC ·
(9 months ago)
Blocked by CSF 13 firewall - Rule: IN/India/hnweb.site
Web App Attack
🇩🇪
Mario Silber
2026-02-13 11:02:38
UTC ·
(9 months ago)
(mod_security) mod_security triggered on hostname [redacted] 159.65.155.157 (IN/India/hnweb.site)
SQL Injection
🇹🇷
rtbh.com.tr
2026-02-12 20:11:31
UTC ·
(9 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2026-02-11 20:11:31
UTC ·
(9 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇨🇭
zynex
2026-02-11 11:46:38
UTC ·
(9 months ago)
URL Probing: /adminer-4.8.1-en.php
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 16:33:35
UTC ·
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 159.65.155.157 (hnweb.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 11:33:31.727052 2026] [security2:error] [pid 1905:tid 1905] [client 159.65.155.157 ...
show more
(mod_security) mod_security (id:210730) triggered by 159.65.155.157 (hnweb.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 11:33:31.727052 2026] [security2:error] [pid 1905:tid 1905] [client 159.65.155.157:40994] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||accu-tuner.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "accu-tuner.com"] [uri "/master.bak"] [unique_id "aYtd2zUXnX2YGpSrh9nglgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-07 22:13:44
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 159.65.155.157 (hnweb.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 17:13:36.488998 2026] [security2:error] [pid 14397:tid 14397] [client 159.65.155.1 ...
show more
(mod_security) mod_security (id:210492) triggered by 159.65.155.157 (hnweb.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 17:13:36.488998 2026] [security2:error] [pid 14397:tid 14397] [client 159.65.155.157:50054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "achari.com"] [uri "/.env"] [unique_id "aYe5EM7hIkyzH_NZDI98iwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-07 21:27:42
UTC ·
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 159.65.155.157 (hnweb.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 16:27:35.979990 2026] [security2:error] [pid 17955:tid 17955] [client 159.65.155.1 ...
show more
(mod_security) mod_security (id:210730) triggered by 159.65.155.157 (hnweb.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 16:27:35.979990 2026] [security2:error] [pid 17955:tid 17955] [client 159.65.155.157:38086] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||microbooty.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "microbooty.com"] [uri "/wp-content.bak"] [unique_id "aYeuR7788FQMDotzDjMBZAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-06 17:43:29
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 159.65.155.157 (hnweb.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 06 12:43:25.923823 2026] [security2:error] [pid 739130:tid 739130] [client 159.65.155 ...
show more
(mod_security) mod_security (id:210492) triggered by 159.65.155.157 (hnweb.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 06 12:43:25.923823 2026] [security2:error] [pid 739130:tid 739130] [client 159.65.155.157:56962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerlinemagazine.com"] [uri "/.env"] [unique_id "aYYoPfIAoW15Xd_M7Zz0agAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack