🇺🇸
TPI-Abuse
2026-10-01 02:45:27
(10 hours ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 22:45:20.791001 2026] [security2:error] [pid 8460:tid 8460] [client 162.158.154.62:13796] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nflelectronics.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nflelectronics.com"] [uri "/index.php.bak"] [unique_id "ar3JQMz2z6pwrQ_8GVKo7QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 07:18:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:17:54.069150 2026] [security2:error] [pid 28538:tid 28538] [client 162.158.154.62:13252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.akronpartybuses.com"] [uri "/.htaccess"] [unique_id "ary3omvAV7rgUplUmjrNlQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 06:59:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 02:59:42.243517 2026] [security2:error] [pid 14076:tid 14076] [client 162.158.154.62:13502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "modelengines.info"] [uri "/.htaccess"] [unique_id "aryzXonQ4fBSO9ehiAuJAAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 22:47:24
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 18:47:20.911959 2026] [security2:error] [pid 9899:tid 10055] [client 162.158.154.62:12996] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gafm.org|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gafm.org"] [uri "/index.php.bak"] [unique_id "arw_-LjD7-oPOcKDwwGZpAAAAVg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 20:46:56
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:46:52.562995 2026] [security2:error] [pid 10595:tid 10595] [client 162.158.154.62:14225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.konahawaiirealty.com"] [uri "/.htaccess"] [unique_id "arwjvOx8cE3DYZeHVW2kDQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Kinsei Engineering Inc.
2026-09-24 14:07:25
(6 days ago)
UFW:High-frequency access to unused ports
Port Scan
🇧🇪
madeit
2026-09-18 19:51:32
(1 week ago)
Web App Attack
🇺🇸
mnsf
2026-04-03 07:05:13
(5 months ago)
Scanning/Probing (16)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 16:14:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 12:14:20.599888 2026] [security2:error] [pid 29025:tid 29025] [client 162.158.154.62:10894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.picayunity.com"] [uri "/.env.test"] [unique_id "ab7D3Gvc-JTJJuxrJ3fGRwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 01:34:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:34:48.187995 2026] [security2:error] [pid 23428:tid 23428] [client 162.158.154.62:9792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "8two7.liddlesports.com"] [uri "/root/.env"] [unique_id "ab31uH_lTfpe5ScO0F3aFwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:28:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:28:14.391507 2026] [security2:error] [pid 3497:tid 3497] [client 162.158.154.62:9509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.acupressbooks.com"] [uri "/.env.prod"] [unique_id "ab3mHoGDqx3u1bJWRHmLuwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 06:31:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:31:13.831091 2026] [security2:error] [pid 17330:tid 17330] [client 162.158.154.62:12783] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mathewsdental.com"] [uri "/.env.prod"] [unique_id "abzpsVhFQ8xEcAUNbdljdgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 06:00:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:00:22.232424 2026] [security2:error] [pid 3927:tid 3927] [client 162.158.154.62:10613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.srippy.com"] [uri "/backend/.env"] [unique_id "abzidvxcstnYVT6vgBhLogAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 05:07:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 01:07:24.726533 2026] [security2:error] [pid 8036:tid 8036] [client 162.158.154.62:11326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.415test.com"] [uri "/.env.prod"] [unique_id "abzWDELot73jovqY_1n8zgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:50:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:50:25.703142 2026] [security2:error] [pid 24526:tid 24526] [client 162.158.154.62:11037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.streetcornerfranchise.com"] [uri "/.env.development"] [unique_id "abyZ0cZ2UZEMKj-QBGXA3AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
