🇺🇸
TPI-Abuse
2026-09-29 12:30:42
(32 minutes ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 08:30:38.320655 2026] [security2:error] [pid 6008:tid 6008] [client 162.158.154.188:11415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.method1.net"] [uri "/.htaccess"] [unique_id "aruvbm7aBQXj-8Q_TZvqLwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 02:17:18
(10 hours ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 22:17:13.470760 2026] [security2:error] [pid 9318:tid 9318] [client 162.158.154.188:10494] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||7livesahead.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "7livesahead.com"] [uri "/index.php.bak"] [unique_id "arsfqc6Ym_qYl7mAlS4H4gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Axel
2026-06-01 22:33:21
(3 months ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /app/.env Ser ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /app/.env Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
🇲🇽
octageeks.com
2026-05-30 04:10:20
(3 months ago)
Wordpress malicious attack:[octainjection]
Web App Attack
🇲🇽
octageeks.com
2026-05-28 04:09:23
(4 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇲🇽
octageeks.com
2026-05-26 04:23:38
(4 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:53:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:52:59.390289 2026] [security2:error] [pid 14478:tid 14478] [client 162.158.154.188:11741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.beepainless.com"] [uri "/app/.env"] [unique_id "ab3r62PrwG59s3WWkLa0eQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 04:26:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 00:26:24.840978 2026] [security2:error] [pid 11998:tid 11998] [client 162.158.154.188:13438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sendmetennessee.com.itibitico.com"] [uri "/.env_backup"] [unique_id "abzMcDItfp8_t95_f9szAQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 04:05:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 00:05:54.916749 2026] [security2:error] [pid 28631:tid 28631] [client 162.158.154.188:13352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.5995.us"] [uri "/docker/.env"] [unique_id "abzHooPx3EOmeoLtbfVIEAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 01:26:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 21:26:31.544601 2026] [security2:error] [pid 15649:tid 15649] [client 162.158.154.188:10932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.familyfuntennis.com"] [uri "/api/.env"] [unique_id "abyiR_vqpkWmn5TbW6oKeQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:59:05
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:58:56.749210 2026] [security2:error] [pid 24538:tid 24538] [client 162.158.154.188:11465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.jabbosjingles.com"] [uri "/config/.env"] [unique_id "abyb0C04pkdkCg4lysfYRAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:46:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:46:07.167503 2026] [security2:error] [pid 12526:tid 12526] [client 162.158.154.188:9951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.equipoperu.org"] [uri "/srv/.env"] [unique_id "abvh_w3Q3y6bXQqTFBduYQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:17:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:17:15.178500 2026] [security2:error] [pid 26463:tid 26504] [client 162.158.154.188:14149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.citystylesseattle.meanmouse.com"] [uri "/api/.env"] [unique_id "abvbOyMnDW69Jjin2h00TAAAAUI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:58:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:58:47.461135 2026] [security2:error] [pid 10617:tid 10617] [client 162.158.154.188:13558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peakagronomysolutions.com"] [uri "/.env.backup"] [unique_id "abvW56k6JEpilFQE5crBfgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:37:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:37:39.464670 2026] [security2:error] [pid 27312:tid 27312] [client 162.158.154.188:12693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.premiumenterprisessolution.com"] [uri "/.env.development"] [unique_id "abvR80XyRlI0cpu7pVY5GwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
