🇺🇸
TPI-Abuse
2026-10-01 06:48:23
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 02:48:16.439896 2026] [security2:error] [pid 8079:tid 8079] [client 162.158.154.207:9508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "histbase.com"] [uri "/.htaccess"] [unique_id "ar4CMCdTpwyoW3cHIQ32cgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 15:55:07
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 11:54:58.708570 2026] [security2:error] [pid 32678:tid 32678] [client 162.158.154.207:11307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marxistphilosophy.org"] [uri "/.htaccess"] [unique_id "ar0w0rjxtGcgLsBRMo7zKgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 13:53:08
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 09:53:05.039177 2026] [security2:error] [pid 28169:tid 28169] [client 162.158.154.207:13772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrsreclamation.com"] [uri "/.htaccess"] [unique_id "ar0UQey8ysGy6gsKX2tSRwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 10:57:03
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:56:57.855678 2026] [security2:error] [pid 629:tid 629] [client 162.158.154.207:9252] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||frenchla.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "frenchla.com"] [uri "/index.php.bak"] [unique_id "arzq-cCW6MHmgl__saqTQgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 01:29:23
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:29:19.453813 2026] [security2:error] [pid 2104:tid 2115] [client 162.158.154.207:10965] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sattraffic.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sattraffic.com"] [uri "/index.php.bak"] [unique_id "arxl73L6y_2N-NSeKdwZrwAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 01:12:54
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:12:48.722372 2026] [security2:error] [pid 25308:tid 25308] [client 162.158.154.207:11727] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||acpb.net|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "acpb.net"] [uri "/index.php.bak"] [unique_id "arxiEKDHs5vBuxEw5CA0MQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 11:08:53
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 07:08:45.677407 2026] [security2:error] [pid 27442:tid 27442] [client 162.158.154.207:13470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "valkyriepanthers.com"] [uri "/.htaccess"] [unique_id "arucPdbZaeBty2KTDkFIrAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 01:23:35
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 21:23:26.569977 2026] [security2:error] [pid 12379:tid 12429] [client 162.158.154.207:9246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mwcecommerce.com"] [uri "/wp-config.php"] [unique_id "arsTDqp2Z6HsmSZdiIPz9QAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 14:41:00
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 10:40:54.726292 2026] [security2:error] [pid 31853:tid 31885] [client 162.158.154.207:13849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.darkestmoonart.com"] [uri "/.git/config"] [unique_id "ao769vD44lpqf6DaKytLnQAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-24 19:18:27
(1 month ago)
Web App Attack
🇺🇸
mnsf
2026-06-16 00:18:03
(3 months ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-04-21 22:06:10
(5 months ago)
Auto-ban: >3000 req/min op 2026-04-21
Web App Attack
SSH
Hacking
🇩🇪
FeG Deutschland
2026-04-14 17:33:07
(5 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
HJ5Ss4Ju
2026-04-14 03:54:21
(5 months ago)
WordPress XMLRPC scan :: 162.158.154.207 - - [14/Apr/2026:03:54:21 0000] "GET /xmlrpc.php?rsd HTTP/ ...
show more
WordPress XMLRPC scan :: 162.158.154.207 - - [14/Apr/2026:03:54:21 0000] "GET /xmlrpc.php?rsd HTTP/1.1" 200 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36"
show less
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 02:31:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 22:31:31.893724 2026] [security2:error] [pid 25501:tid 25501] [client 162.158.154.207:10218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.alosi.us"] [uri "/.env.container"] [unique_id "ab4DA5HH-dMRz4t8HMkoSgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
