🇺🇸
TPI-Abuse
2026-10-01 16:47:39
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 12:47:35.059066 2026] [security2:error] [pid 6176:tid 6176] [client 162.158.154.254:14095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pjv.us"] [uri "/.htaccess"] [unique_id "ar6Opx8brRigdFJ4UCedDwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 14:58:38
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 10:58:33.850254 2026] [security2:error] [pid 32480:tid 32480] [client 162.158.154.254:12713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virginians.com"] [uri "/wp-config.php"] [unique_id "ar0jmRTpa8ziciithPkuJgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 12:13:45
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 08:13:40.216284 2026] [security2:error] [pid 9605:tid 9605] [client 162.158.154.254:13252] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rldcompany.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rldcompany.com"] [uri "/index.php.bak"] [unique_id "arz89LVujgi0plgG49dnLAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 12:29:06
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 08:29:02.096977 2026] [security2:error] [pid 21754:tid 21754] [client 162.158.154.254:9487] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||somuchtoread.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "somuchtoread.com"] [uri "/index.php.bak"] [unique_id "aruvDjaF_q4hGJ_AIzMUvQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 03:27:51
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 23:27:45.963272 2026] [security2:error] [pid 4613:tid 4679] [client 162.158.154.254:10436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ptinct.org"] [uri "/wp-config.php"] [unique_id "arswMb5-K7Gj5u9vsnOx2AAAAQE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 21:07:39
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:07:34.265279 2026] [security2:error] [pid 31458:tid 31458] [client 162.158.154.254:14120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qualtacon.com"] [uri "/wp-config.php"] [unique_id "arrXFq1QyonqywQvpcfQlQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 11:18:31
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 07:18:26.477607 2026] [security2:error] [pid 7021:tid 7021] [client 162.158.154.254:11890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ictsl.net"] [uri "/wp-config.php"] [unique_id "arpNAqKZHi1C7LtE6MIc_QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 08:38:56
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 04:38:50.459836 2026] [security2:error] [pid 31333:tid 31333] [client 162.158.154.254:11499] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accommodation-perthairport.com"] [uri "/.htaccess"] [unique_id "aronmjNUi5cztB2pdNKZEwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Prcek
2026-08-29 22:58:22
(1 month ago)
PortScan:HOST=162.158.154.254,DPORTS=443
Port Scan
🇺🇸
TPI-Abuse
2026-08-26 06:59:38
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 02:59:32.758808 2026] [security2:error] [pid 17714:tid 17725] [client 162.158.154.254:11167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.degreesoflove.com.teritemme.com"] [uri "/.git/config"] [unique_id "ao6O1Nnfl1aS2yOgjXT0rgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 05:36:42
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 01:36:38.291206 2026] [security2:error] [pid 10068:tid 10068] [client 162.158.154.254:14138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cobbwebb.net"] [uri "/.git/config"] [unique_id "aoVA5uRmTqU9OpoRTdIJvgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-05 09:59:38
(3 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇺🇸
octageeks.com
2026-04-10 04:08:41
(5 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
octageeks.com
2026-04-04 04:44:53
(6 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:34:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:34:33.195935 2026] [security2:error] [pid 31411:tid 31486] [client 162.158.154.254:11784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.alisalholdings.oconnorpest.biz"] [uri "/.env.backup"] [unique_id "ab3nmTeqrz252n0gEl_smQAAAMs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
