🇫🇷
dynamix
2026-10-20 19:31:58
(1 day ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-05 18:22:45
(2 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 15:46:57
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 11:46:52.431198 2026] [security2:error] [pid 2993:tid 2993] [client 162.158.154.147:13840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandiegobeachrentals.com"] [uri "/wp-config.php.bak"] [unique_id "ar6AbFH4EySuqg8Z0h_9ZAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 15:25:23
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 11:25:19.817140 2026] [security2:error] [pid 677:tid 677] [client 162.158.154.147:9980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lynnsmetkodesigns.com"] [uri "/.htaccess"] [unique_id "ar0p30hWsP8ECPYYssqtDAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 12:51:24
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 08:51:21.853755 2026] [security2:error] [pid 19135:tid 19135] [client 162.158.154.147:14323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.margroberts.com"] [uri "/.htaccess"] [unique_id "ar0FyX1ofsv2KzM4MH-H3gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 15:15:38
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 11:15:31.888992 2026] [security2:error] [pid 6817:tid 6817] [client 162.158.154.147:14201] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||alpinexport.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alpinexport.com"] [uri "/wp-config.php.bak"] [unique_id "arqEk1dZ_DmTWtIcREnISgAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 14:54:32
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 10:54:29.705821 2026] [security2:error] [pid 12550:tid 12550] [client 162.158.154.147:12671] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nwtree.com"] [uri "/wp-config.php"] [unique_id "arp_paj6-T8XuD-exmpm8AAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 13:33:34
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 09:33:29.419054 2026] [security2:error] [pid 23406:tid 23406] [client 162.158.154.147:11222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.cowboyholidaycards.com"] [uri "/.git/HEAD"] [unique_id "ao7rKXYIb0kv9UkG8Y4KVgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mawan
2026-08-02 17:41:29
(2 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
drewf.ink
2026-06-20 13:28:53
(4 months ago)
[13:28] Port scanning. Port(s) scanned: TCP/8080
Port Scan
🇦🇺
oncord
2026-05-09 08:30:37
(5 months ago)
Form spam
Web Spam
🇺🇸
octageeks.com
2026-04-09 04:10:07
(6 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:41:08
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:41:01.806537 2026] [security2:error] [pid 20127:tid 20127] [client 162.158.154.147:10437] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.brokenglasstelecom.com"] [uri "/.env.development"] [unique_id "ab3pHa6RC8CoV4I3CPJhfgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 07:13:10
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:13:04.376762 2026] [security2:error] [pid 15769:tid 15769] [client 162.158.154.147:12237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.new.angelabcomics.com"] [uri "/.env.backup"] [unique_id "abzzgIelQrXfAWGg6RoMTAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 04:07:23
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 00:07:18.880057 2026] [security2:error] [pid 29644:tid 29644] [client 162.158.154.147:12656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justwantedtosay.com"] [uri "/.env~"] [unique_id "abzH9mgNqj66KIivE8VAeQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack