🇺🇸
TPI-Abuse
2026-11-07 20:37:30
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.110.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:37:22.883188 2026] [security2:error] [pid 8402:tid 8402] [client 162.158.110.98:10308] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.110.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:37:22.883188 2026] [security2:error] [pid 8402:tid 8402] [client 162.158.110.98:10308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perlcreativedesign.com"] [uri "/.htaccess"] [unique_id "au-MAkOENKAHwQhvQsLkKgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-11-04 18:34:59
UTC ·
(3 days ago)
Web App Attack
🇩🇪
altenglaner
2026-10-24 13:28:45
UTC ·
(2 weeks ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇩🇪
altenglaner
2026-10-18 04:53:07
UTC ·
(3 weeks ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇧🇪
madeit
2026-10-13 22:49:24
UTC ·
(3 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:07:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 162.158.110.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:07:29.263147 2026] [security2:error] [pid 1549:tid 1549] [client 162.158.110.98:10565] M ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.110.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:07:29.263147 2026] [security2:error] [pid 1549:tid 1549] [client 162.158.110.98:10565] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jamiesbballpool.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jamiesbballpool.com"] [uri "/backup.sql"] [unique_id "as6roXoImUE7hn630_USrgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FutureFm
2026-10-13 13:26:00
UTC ·
(3 weeks ago)
162.158.110.98 - - [13/Oct/2026:10:10:40 +0000] "GET /wp-admin/install.php?step=1 HTTP/1.1" 404
Brute-Force
Web App Attack
Hacking
🇺🇦
URAN Publishing Service
2026-10-13 06:54:01
UTC ·
(3 weeks ago)
[13/Oct/2026:09:54:01 +0300] -- 162.158.110.98 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-content/plugins/woocommerce/readme.txt HTTP/1.1
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 11:39:04
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.110.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 07:39:00.965354 2026] [security2:error] [pid 27554:tid 27554] [client 162.158.110.98:10323] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.110.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 07:39:00.965354 2026] [security2:error] [pid 27554:tid 27554] [client 162.158.110.98:10323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flatontaylor.com"] [uri "/.git/config"] [unique_id "asoj1CbK3majZdhhIw246QAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 19:22:19
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.110.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 15:22:12.316245 2026] [security2:error] [pid 24564:tid 24564] [client 162.158.110.98:11008] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.110.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 15:22:12.316245 2026] [security2:error] [pid 24564:tid 24564] [client 162.158.110.98:11008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paavoharkonen.com"] [uri "/.git/config"] [unique_id "ask-5OujtJzWZyW5o85epAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-08 04:21:55
UTC ·
(1 month ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 13:30:17
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.110.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 09:30:10.560541 2026] [security2:error] [pid 29939:tid 29939] [client 162.158.110.98:12073] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.110.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 09:30:10.560541 2026] [security2:error] [pid 29939:tid 29939] [client 162.158.110.98:12073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "easylandcash.com"] [uri "/.git/config"] [unique_id "arZ3YscrGiS0Y_nTgYAqewAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-15 18:42:14
UTC ·
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-08-13 22:01:08
UTC ·
(2 months ago)
Web App Attack
🇨🇭
backslash
2026-08-10 08:06:00
UTC ·
(2 months ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot