🇫🇷
dynamix
2026-10-20 19:31:57
(1 week ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-06 20:49:22
(3 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 03:20:46
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 23:20:38.398423 2026] [security2:error] [pid 1369:tid 1369] [client 162.158.154.146:10435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "picklehill.borzois.com"] [uri "/.htaccess"] [unique_id "ar3Rhotsv_Unw20v5IZCmwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 15:25:03
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 11:24:58.752060 2026] [security2:error] [pid 736:tid 736] [client 162.158.154.146:10766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lynnsmetkodesigns.com"] [uri "/wp-config.php"] [unique_id "ar0pyicEDpNIgc_eFIAU1gAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 16:42:38
(4 weeks ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 12:42:34.633393 2026] [security2:error] [pid 9025:tid 9025] [client 162.158.154.146:14235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||krmartindale.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "krmartindale.com"] [uri "/index.php.bak"] [unique_id "arvqemztMLqj3dBDKsyfIQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 18:44:43
(4 weeks ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:44:39.520173 2026] [security2:error] [pid 3260:tid 3260] [client 162.158.154.146:11239] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||alpinexport.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alpinexport.com"] [uri "/wp-config.php.bak"] [unique_id "arq1l5ceJxl8lwR_JXYgogAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 14:54:27
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 10:54:21.726401 2026] [security2:error] [pid 12505:tid 12505] [client 162.158.154.146:12002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nwtree.com"] [uri "/.git/config"] [unique_id "arp_nQ28N6CdU2UFFqS0cwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 09:26:45
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 05:26:37.340935 2026] [security2:error] [pid 22774:tid 22838] [client 162.158.154.146:9588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pattinauction.com"] [uri "/.htaccess"] [unique_id "aroyzXgsDmnn-mWIY-fT3gAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-10 18:10:35
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 06:48:16
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 02:48:12.715286 2026] [security2:error] [pid 22937:tid 22937] [client 162.158.154.146:11527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.printedpartynapkins.com"] [uri "/.git/config"] [unique_id "ao6MLK6lmDIL9MVSmVmc6wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-23 08:26:54
(2 months ago)
Web App Attack
🇧🇪
madeit
2026-08-16 00:25:11
(2 months ago)
Web App Attack
🇧🇾
lns.bz
2026-07-11 00:53:20
(3 months ago)
.env scanning [BY]
Web App Attack
🇺🇸
drewf.ink
2026-06-17 14:10:30
(4 months ago)
[14:10] Port scanning. Port(s) scanned: TCP/8080
Port Scan
🇮🇹
Inartis
2026-06-17 10:16:17
(4 months ago)
162.158.154.146 - - [17/Jun/2026:12:16:16 +0200] "GET /xmlrpc.php HTTP/2.0" 403 253 "https://www.goo ...
show more
162.158.154.146 - - [17/Jun/2026:12:16:16 +0200] "GET /xmlrpc.php HTTP/2.0" 403 253 "https://www.google.com/search?q=neokube.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
