🇺🇸
TPI-Abuse
2026-10-15 23:12:52
(12 hours ago)
(mod_security) mod_security (id:210730) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 19:12:38.419886 2026] [security2:error] [pid 10717:tid 10717] [client 162.158.122.126:10161] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||chicagowca.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chicagowca.com"] [uri "/index.php.bak"] [unique_id "atFd5q24NlZzLnuTZA-rdgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 18:45:07
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 14:44:58.759575 2026] [security2:error] [pid 6719:tid 6719] [client 162.158.122.126:11054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "totho.com"] [uri "/.env.save"] [unique_id "atEfKgb_4a7SADefCbWCMQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-10-15 18:29:52
(17 hours ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based ...
show more
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:59:17
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:59:03.650944 2026] [security2:error] [pid 31257:tid 31257] [client 162.158.122.126:11876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "battlestem.com"] [uri "/.git/config"] [unique_id "atDcJ32qaL5PMGvFQ3KnCwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 12:58:01
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:57:54.033087 2026] [security2:error] [pid 22651:tid 22671] [client 162.158.122.126:10228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mouawadarchitects.com"] [uri "/.env.backup"] [unique_id "atDN0q0Yqkh4nvnM2tLxggAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 12:33:35
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:33:21.317266 2026] [security2:error] [pid 28593:tid 28593] [client 162.158.122.126:12197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drainpoultry.com"] [uri "/.env.local"] [unique_id "atDIETLNfDM7PvPTGZWe2gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 11:08:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 07:08:27.643329 2026] [security2:error] [pid 10519:tid 10538] [client 162.158.122.126:13306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clinicadelparabrisas.com"] [uri "/.env.production"] [unique_id "atC0K13I820EDp4dXUj_JgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-15 09:56:44
(1 day ago)
[15/Oct/2026:12:56:43 +0300] -- 162.158.122.126 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.e ...
show more
[15/Oct/2026:12:56:43 +0300] -- 162.158.122.126 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.local HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 09:33:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 05:33:11.849982 2026] [security2:error] [pid 30457:tid 30457] [client 162.158.122.126:13496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rnance.com"] [uri "/.env.backup"] [unique_id "atCd1w3klqZVuuQ2oC53nAAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 08:37:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:37:38.760875 2026] [security2:error] [pid 22972:tid 22972] [client 162.158.122.126:13278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dreamingofatlantis.hal.dance"] [uri "/.env.staging"] [unique_id "atCQ0rH32_MZTqUd_GAIcwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-15 07:05:51
(1 day ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-07 16:37:18
(1 week ago)
Web App Attack
🇧🇪
madeit
2026-09-07 18:35:14
(1 month ago)
Web App Attack
🇺🇸
mawan
2026-08-18 02:52:59
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇧🇪
madeit
2026-08-15 15:59:20
(2 months ago)
Web App Attack
