🇺🇸
TPI-Abuse
2026-09-29 12:17:06
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 08:17:02.269967 2026] [security2:error] [pid 6276:tid 6297] [client 162.158.154.239:10889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "viasatsales.com"] [uri "/.htaccess"] [unique_id "arusPuQpvuX3CMZBfxF7tgAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 01:06:33
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 21:06:27.650138 2026] [security2:error] [pid 8882:tid 8882] [client 162.158.154.239:10718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mywheatgrass.com"] [uri "/.htaccess"] [unique_id "arsPEyzOoEXLUvqBgVUF-AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 06:00:11
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 02:00:05.619626 2026] [security2:error] [pid 19132:tid 19132] [client 162.158.154.239:9571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kiubo.net"] [uri "/.git/config"] [unique_id "aoVGZeFkl-TFfvLA19KOeAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-06 04:13:02
(1 month ago)
Web App Attack
🇲🇽
octageeks.com
2026-05-22 04:11:39
(4 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
octageeks.com
2026-04-10 04:09:24
(5 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 04:16:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 00:16:14.095133 2026] [security2:error] [pid 28438:tid 28438] [client 162.158.154.239:13952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.architech.com"] [uri "/backend/.env"] [unique_id "ab4bjlBg4PN7oX6SEJJW-wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 03:04:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 23:04:30.320443 2026] [security2:error] [pid 8981:tid 8981] [client 162.158.154.239:12414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rimaine.org"] [uri "/.env.bak"] [unique_id "ab4Kvs1Vgp-utxRqbxxFHAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 02:37:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 22:37:38.034313 2026] [security2:error] [pid 3715:tid 3715] [client 162.158.154.239:12324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.disenowebprofesional.com"] [uri "/.env.container"] [unique_id "ab4Ecvogjv-S0sYj6pyMeAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:30:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:30:51.132763 2026] [security2:error] [pid 23310:tid 23310] [client 162.158.154.239:11070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.braunhausmedia.com"] [uri "/app/.env"] [unique_id "ab3muz-S1BUBwW1LAv_voAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 08:24:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:24:25.990424 2026] [security2:error] [pid 7505:tid 7505] [client 162.158.154.239:12351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dodosdiscuss.flyingdodostudio.com"] [uri "/.env.test"] [unique_id "ab0EOYF5I91RXjyw16EyUgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 07:26:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:25:59.880314 2026] [security2:error] [pid 3768:tid 3768] [client 162.158.154.239:9307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.jamesmsmall.com"] [uri "/srv/.env"] [unique_id "abz2h1flRvMiXreinfFUrQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 06:31:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:31:49.132381 2026] [security2:error] [pid 22612:tid 22614] [client 162.158.154.239:10822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.atechtransmission.com"] [uri "/.env.production"] [unique_id "abzp1TZivKdm29oaro_iaQAAAQA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 06:15:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:15:26.118170 2026] [security2:error] [pid 21586:tid 21586] [client 162.158.154.239:14198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.couturebikini.com"] [uri "/.git/refs/heads/main"] [unique_id "abzl_k4Ejj2hbUefs1ttgAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 02:03:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:03:06.828328 2026] [security2:error] [pid 27025:tid 27025] [client 162.158.154.239:10031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.n3fjp.com"] [uri "/api/.env"] [unique_id "abyq2sDTGKFt4LHWMHBXOAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
