🇺🇸
TPI-Abuse
2026-10-15 21:02:44
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 17:02:19.532877 2026] [security2:error] [pid 9963:tid 9963] [client 162.158.122.72:13461] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 17:02:19.532877 2026] [security2:error] [pid 9963:tid 9963] [client 162.158.122.72:13461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "troop698.org"] [uri "/.env.bak"] [unique_id "atE_W0oQFYc-tVNJVjxViwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 10:03:25
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 06:03:14.088254 2026] [security2:error] [pid 21000:tid 21000] [client 162.158.122.72:11324] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 06:03:14.088254 2026] [security2:error] [pid 21000:tid 21000] [client 162.158.122.72:11324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "braddonengineering.com"] [uri "/.git/HEAD"] [unique_id "atCk4l6rzh3Qwo-apUvIuAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 09:39:16
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 05:39:10.144438 2026] [security2:error] [pid 19969:tid 20015] [client 162.158.122.72:10894] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 05:39:10.144438 2026] [security2:error] [pid 19969:tid 20015] [client 162.158.122.72:10894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.condo.management"] [uri "/.git/HEAD"] [unique_id "atCfPuFCPYb8bMVXL5_vLgAAARE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
netclix.gr
2026-09-27 11:22:33
UTC ·
(1 month ago)
(bot_kill_mega) Aggressive Bot Blocked: Go-http-client 162.158.122.72 (ES/Spain/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 162.158.122.72 - - [27/Sep/2026:14:22:01 +0300] "POST /login_up.php HTTP/2.0" 20 ...
show more
(bot_kill_mega) Aggressive Bot Blocked: Go-http-client 162.158.122.72 (ES/Spain/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 162.158.122.72 - - [27/Sep/2026:14:22:01 +0300] "POST /login_up.php HTTP/2.0" 200 29726 "-" "Go-http-client/1.1" "217.154.188.136"'/login_up.php' '' '/opt/psa/admin/htdocs'
show less
Port Scan
🇧🇪
madeit
2026-09-23 13:44:57
UTC ·
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-08-14 19:39:15
UTC ·
(2 months ago)
Web App Attack
🇦🇺
dyln
2026-06-30 13:34:30
UTC ·
(4 months ago)
Dyls honeypot brute-force: proto8 (1 total hits)
Brute-Force
🇺🇦
URAN Publishing Service
2025-09-10 21:12:25
UTC ·
(1 year ago)
162.158.122.72 - - [11/Sep/2025:00:11:57 +0300] "GET /wp-includes/fonts/admin.php HTTP/1.1" 404 196 "-" "-"
162.158.122.72 - - [11/Sep/2025:00:12:24 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 404 196 "-" "-"
...
Web App Attack
🇮🇹
IRT@Unisi
2025-09-02 21:49:47
UTC ·
(1 year ago)
anomaly:tcp_dst_session,1001>threshold1000,repeats51timessincelastlog
DDoS Attack
🇩🇪
paissangroup
2025-03-12 00:21:18
UTC ·
(1 year ago)
Multiple WAF Violations
Web App Attack
🇧🇷
Sargon Bercot
2024-12-15 23:01:30
UTC ·
(1 year ago)
162.158.122.72 - - [15/Dec/2024:20:01:30 -0300] "POST /wp-login.php HTTP/1.1" 301 178 "https://condominiosolarsul.com.br/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
1 ...
show more
162.158.122.72 - - [15/Dec/2024:20:01:30 -0300] "POST /wp-login.php HTTP/1.1" 301 178 "https://condominiosolarsul.com.br/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
162.158.122.72 - - [15/Dec/2024:20:01:30 -0300] "POST /wp-login.php HTTP/1.1" 301 178 "https://condominiosolarsul.com.br/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
162.158.122.72 - - [15/Dec/2024:20:01:30 -0300] "POST /wp-login.php HTTP/1.1" 301 178 "https://condominiosolarsul.com.br/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
...
show less
Brute-Force
SSH
Anonymous
2024-12-12 03:50:02
UTC ·
(1 year ago)
| Suspicious URL access.
Hacking
SQL Injection
Web App Attack
🇳🇱
Study Bitcoin 🤗
2024-11-26 14:04:28
UTC ·
(1 year ago)
Port probe to tcp/443 (https)
[srv130]
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2024-11-15 06:10:32
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇳🇱
Study Bitcoin 🤗
2024-11-12 14:36:59
UTC ·
(2 years ago)
Port probe to tcp/80 (http)
[srv125]
Port Scan
Bad Web Bot
Web App Attack