πΊπΈ
TPI-Abuse
2026-09-30 08:53:06
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 04:53:01.883500 2026] [security2:error] [pid 25625:tid 25634] [client 162.158.155.169:13807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nwnative.us"] [uri "/wp-config.php.bak"] [unique_id "arzN7UTyFob6tqikbBPcbwAAAMI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-30 07:29:50
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:29:43.200604 2026] [security2:error] [pid 16122:tid 16122] [client 162.158.155.169:12034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jazziientertainment.com"] [uri "/wp-config.php.bak"] [unique_id "ary6Z7UmBnysH1xKzQTGNwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-30 05:19:20
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 01:19:15.548680 2026] [security2:error] [pid 605:tid 605] [client 162.158.155.169:12034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kriske.com"] [uri "/wp-config.php.bak"] [unique_id "aryb09WazOPYbU3X1UnUCAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-28 18:35:28
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:35:22.514977 2026] [security2:error] [pid 2132:tid 2132] [client 162.158.155.169:13727] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||primemanagementmn.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "primemanagementmn.com"] [uri "/index.php.bak"] [unique_id "arqzajhzDro718jXaJ1R9QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π§πͺ
madeit
2026-09-16 07:23:49
(2 weeks ago)
Web App Attack
π«π·
dynamix
2026-09-14 16:49:01
(2 weeks ago)
Multiple WAF Violations
Web App Attack
π§πͺ
madeit
2026-09-01 01:27:15
(4 weeks ago)
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-27 14:13:20
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 10:13:14.517402 2026] [security2:error] [pid 4497:tid 4497] [client 162.158.155.169:9685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southhigh81.com"] [uri "/.git/HEAD"] [unique_id "apBF-nOVx3LYQQMsWqvIcgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π§πͺ
madeit
2026-08-21 03:40:50
(1 month ago)
Web App Attack
πΊπΈ
mnsf
2026-04-01 20:07:09
(5 months ago)
Scanning/Probing (15)
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-20 09:28:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:28:35.011161 2026] [security2:error] [pid 12407:tid 12407] [client 162.158.155.169:9536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twogocamping.com"] [uri "/.env.backup"] [unique_id "ab0TQ6I7f6ezAiuX99R_vQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-20 06:14:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:14:38.106579 2026] [security2:error] [pid 23141:tid 23152] [client 162.158.155.169:9982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.i-masmx.com"] [uri "/.env.development"] [unique_id "abzlzqZS8i2WYfKhKjLsCAAAAIg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-20 04:11:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 00:11:45.442007 2026] [security2:error] [pid 26082:tid 26082] [client 162.158.155.169:13593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bgraph.com"] [uri "/.env.local"] [unique_id "abzJAbmYeQiMJoM0ErHaAwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-20 03:03:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:03:45.274393 2026] [security2:error] [pid 6692:tid 6692] [client 162.158.155.169:13645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.krystalsgiftshopandboutique.net"] [uri "/.env.development"] [unique_id "aby5EXliItEIRJvVa9VffgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-19 11:08:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:08:04.839222 2026] [security2:error] [pid 4424:tid 4424] [client 162.158.155.169:11725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.williambarfoot.com"] [uri "/.env.test"] [unique_id "abvZFKCK62rX-pMf0gKW6AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack