🇧🇪
madeit
2026-10-05 16:39:31
(1 day ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 06:51:36
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 02:51:32.255147 2026] [security2:error] [pid 22287:tid 22287] [client 162.158.154.163:9251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fairytaleinvitations.com"] [uri "/.htaccess"] [unique_id "ar4C9KRwkJInbF_mZwXuwAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 03:05:59
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 23:05:51.827285 2026] [security2:error] [pid 31373:tid 31373] [client 162.158.154.163:11373] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.avaliantlife.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.avaliantlife.com"] [uri "/index.php.bak"] [unique_id "ar3OD34yu03AMkecIgFOfgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 01:54:38
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:54:31.210721 2026] [security2:error] [pid 19928:tid 19928] [client 162.158.154.163:12822] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||wealthsec.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wealthsec.com"] [uri "/index.php.bak"] [unique_id "arxr10N4Dcv12lMcfzKRmwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 20:16:46
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:16:40.586594 2026] [security2:error] [pid 21346:tid 21346] [client 162.158.154.163:9507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "good4sound.com"] [uri "/wp-config.php"] [unique_id "arrLKJfZbO7qyYBAXOkI9AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 19:09:39
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 15:09:33.209278 2026] [security2:error] [pid 5351:tid 5351] [client 162.158.154.163:10887] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||disneylawsuit.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "disneylawsuit.com"] [uri "/index.php.bak"] [unique_id "arq7bc7Q581On7S885TyywAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 12:12:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 08:12:20.067562 2026] [security2:error] [pid 6845:tid 6856] [client 162.158.154.163:11926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peluqueriabuhos.com"] [uri "/wp-config.php.bak"] [unique_id "arpZpPZEKqkAzyMTLP5O8gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-18 19:48:03
(2 weeks ago)
Web App Attack
🇧🇪
madeit
2026-09-07 20:58:18
(4 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 21:59:15
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 17:59:11.702434 2026] [security2:error] [pid 10114:tid 10114] [client 162.158.154.163:14153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.theboss97fm.com"] [uri "/.git/HEAD"] [unique_id "ao9hr7QVzAdQlcV028vvhAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 17:45:49
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 13:45:41.582031 2026] [security2:error] [pid 19901:tid 19966] [client 162.158.154.163:9785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.annaly.org"] [uri "/.git/config"] [unique_id "ao3UxUv_G66QOAOBy_lqnwAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-25 16:08:44
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 03:24:20
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:24:17.529934 2026] [security2:error] [pid 12294:tid 12294] [client 162.158.154.163:9932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.easterbilby.net"] [uri "/.git/HEAD"] [unique_id "aoUh4ZhIljXDDRdEBAS3QgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 10:47:05
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 06:46:58.365336 2026] [security2:error] [pid 22275:tid 22275] [client 162.158.154.163:11401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.stansco.com"] [uri "/.git/config"] [unique_id "aoLmopPq2MylkWneu-zWLQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 03:01:18
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 23:01:14.211346 2026] [security2:error] [pid 6070:tid 6070] [client 162.158.154.163:12395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.graftandcorruption.net"] [uri "/.git/config"] [unique_id "aoJ5eojsxUdOyqRVeiLdmQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
