🇧🇪
madeit
2026-09-28 15:46:24
(1 day ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 08:05:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 04:04:58.905054 2026] [security2:error] [pid 3907:tid 3907] [client 162.158.154.123:13791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jwilder.com"] [uri "/.htaccess"] [unique_id "arofquuYdGQN0kUbjivjtAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-18 19:51:06
(1 week ago)
Web App Attack
2026-09-11 22:54:29
(2 weeks ago)
[Sat Sep 12 00:54:27.727077 2026] [authz_core:error] [pid 9328] [client 162.158.154.123:11567] AH016 ...
show more
[Sat Sep 12 00:54:27.727077 2026] [authz_core:error] [pid 9328] [client 162.158.154.123:11567] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat Sep 12 00:54:28.048871 2026] [authz_core:error] [pid 9328] [client 162.158.154.123:11567] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat Sep 12 00:54:28.361600 2026] [authz_core:error] [pid 9328] [client 162.158.154.123:11567] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
🇧🇪
madeit
2026-08-26 13:23:15
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 18:48:56
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 14:48:49.634120 2026] [security2:error] [pid 25146:tid 25146] [client 162.158.154.123:24446] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.michaelgardner.com|F|2"] [data "[email protected] "] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.michaelgardner.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "al5tkf6kobMPE3yEmMfRvQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 05:23:05
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 01:23:01.504596 2026] [security2:error] [pid 4195:tid 4195] [client 162.158.154.123:14181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wallpaperpro.com"] [uri "/.env.production.local"] [unique_id "ab4rNSxedzDv1J9G5pKV1gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 09:28:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:28:13.509847 2026] [security2:error] [pid 3415:tid 3415] [client 162.158.154.123:12224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twogocamping.com"] [uri "/.env.test"] [unique_id "ab0TLX6NJjtwdwM36wKn6AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 09:08:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:08:16.450814 2026] [security2:error] [pid 31408:tid 31428] [client 162.158.154.123:11542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vancekelly.com"] [uri "/.env.backup"] [unique_id "ab0OgP5pZYH0his5s4ub1wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 08:09:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:08:58.184193 2026] [security2:error] [pid 28972:tid 28972] [client 162.158.154.123:13444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.braddonengineering.com"] [uri "/.env.dev"] [unique_id "ab0Amt-_OyzYbQd_7eZPRwAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 07:38:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:38:14.155580 2026] [security2:error] [pid 31380:tid 31380] [client 162.158.154.123:11585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.rooksfamily.com"] [uri "/.env.backup"] [unique_id "abz5Zg-SsAj1LIENwkhbaAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 06:05:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:05:44.490563 2026] [security2:error] [pid 6619:tid 6619] [client 162.158.154.123:12477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.dualspiralsystems.com"] [uri "/server/.env"] [unique_id "abzjuBMEbbH_RitOKs6LeQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 04:22:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 00:22:04.983544 2026] [security2:error] [pid 30510:tid 30510] [client 162.158.154.123:12741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "computerscharlotte.computersraleigh.com"] [uri "/.env1"] [unique_id "abzLbNd1qmt7ZsNrCy26swAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2026-03-20 04:09:55
(6 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:16:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:16:22.748154 2026] [security2:error] [pid 23693:tid 23693] [client 162.158.154.123:10413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.partybusesflint.com"] [uri "/.env.bak"] [unique_id "abvbBheeZYm_-L3P1Be9rgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
