🇺🇸
TPI-Abuse
2026-09-30 09:03:00
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 05:02:57.601947 2026] [security2:error] [pid 1492:tid 1492] [client 162.158.154.95:12636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dictionaryoffish.com"] [uri "/wp-config.php.bak"] [unique_id "arzQQZaP57iLmzDZ1LsO2gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 07:38:01
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:37:54.815189 2026] [security2:error] [pid 28051:tid 28051] [client 162.158.154.95:9799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "futuresgrowhere.com"] [uri "/.htaccess"] [unique_id "ary8UjxIO3VQMoVHb1oL1wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 06:11:52
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 02:11:47.470498 2026] [security2:error] [pid 24206:tid 24206] [client 162.158.154.95:12752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bluegrassexpressband.com"] [uri "/.htaccess"] [unique_id "aryoI-Eo8NO6mkV49TfjGQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 05:48:42
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 01:48:36.674479 2026] [security2:error] [pid 9693:tid 9693] [client 162.158.154.95:14204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "steinmetzjewelers.com"] [uri "/wp-config.php"] [unique_id "aryitG3uj8sUgEZ7vypocgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 16:39:05
(18 hours ago)
(mod_security) mod_security (id:210730) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 12:39:00.634682 2026] [security2:error] [pid 16348:tid 16348] [client 162.158.154.95:13161] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gbcwoodbine.org|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gbcwoodbine.org"] [uri "/index.php.bak"] [unique_id "arvppPH18r11pu3NW-NpXwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 10:35:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 06:35:42.755111 2026] [security2:error] [pid 18868:tid 18868] [client 162.158.154.95:12079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lct.lbee.com"] [uri "/wp-config.php"] [unique_id "aruUflRinRkbWw6BfvF6nwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 10:03:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 06:03:39.442863 2026] [security2:error] [pid 8893:tid 8893] [client 162.158.154.95:12959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "snowrideadventures.com"] [uri "/.htaccess"] [unique_id "aruM-9SAOmz9CHCl2cWCAAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dot.mg
2026-09-28 15:44:16
(1 day ago)
Impersonating Good bots
Bad Web Bot
🇧🇪
madeit
2026-09-25 19:36:48
(4 days ago)
Web App Attack
🇺🇸
dot.mg
2026-09-11 16:03:27
(2 weeks ago)
Impersonating Good bots
Bad Web Bot
🇧🇪
madeit
2026-08-31 16:26:08
(4 weeks ago)
Web App Attack
🇧🇪
madeit
2026-08-23 00:38:19
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 04:48:36
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 00:48:29.199373 2026] [security2:error] [pid 18498:tid 18498] [client 162.158.154.95:12846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.syvox.net"] [uri "/.git/config"] [unique_id "aoU1nZN3qVgbDF07SeIs9AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
OptimusGO
2026-07-28 20:59:27
(2 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-07-28 21:59:27 UTC
Log evidence:
07/28/2026-21:59:24.954543 [**] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [**] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 162.158.154.95:11815 -> 185.127.18.66:8443
show less
Port Scan
Brute-Force
🇺🇸
octageeks.com
2026-04-10 04:08:42
(5 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
