🇺🇸
TPI-Abuse
2026-10-01 09:32:35
(17 hours ago)
(mod_security) mod_security (id:210730) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 05:32:29.140574 2026] [security2:error] [pid 21814:tid 21814] [client 162.158.155.210:9389] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||halblog.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "halblog.com"] [uri "/index.php.bak"] [unique_id "ar4orZ2D7iLjJQmkx6pBlQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 03:28:44
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 23:28:38.180367 2026] [security2:error] [pid 12138:tid 12138] [client 162.158.155.210:13483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ourodyssey.us"] [uri "/.htaccess"] [unique_id "ar3TZto-cYvYLRXd65eEMwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 14:34:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 10:33:54.823883 2026] [security2:error] [pid 16187:tid 16187] [client 162.158.155.210:10319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.milocor.com"] [uri "/wp-config.php"] [unique_id "ar0d0thuH_dq852uFLIUmgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 10:34:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:34:26.471330 2026] [security2:error] [pid 29485:tid 29485] [client 162.158.155.210:12158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bahamascruisersguide.com"] [uri "/wp-config.php.bak"] [unique_id "arzlsv7Zvn-qiBxYISlU4QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 09:51:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 05:51:05.504799 2026] [security2:error] [pid 16027:tid 16027] [client 162.158.155.210:13041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mathiasaspelin.com"] [uri "/.htaccess"] [unique_id "arzbiSZV24ZKVNdEw14-wQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 07:33:54
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:33:51.015985 2026] [security2:error] [pid 31389:tid 31389] [client 162.158.155.210:10233] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||barbaramcadams.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "barbaramcadams.com"] [uri "/index.php.bak"] [unique_id "ary7X-hoQtrn1feIZjdGvAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 18:10:07
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 14:10:03.289766 2026] [security2:error] [pid 25106:tid 25106] [client 162.158.155.210:9913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.san-marino-boat-registration.com"] [uri "/.htaccess"] [unique_id "arv---TOhUWYxnZwVPjt0AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 12:50:52
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 08:50:50.017186 2026] [security2:error] [pid 18652:tid 18678] [client 162.158.155.210:9565] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thompsonhypnotherapy.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thompsonhypnotherapy.com"] [uri "/index.php.bak"] [unique_id "aru0KmRki318CWoNNnztXAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-29 01:10:41
(3 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 16:41:13
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 12:41:08.493657 2026] [security2:error] [pid 26442:tid 26442] [client 162.158.155.210:13062] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bigchus.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bigchus.com"] [uri "/index.php.bak"] [unique_id "arqYpE7WLiD9lPq6jqDzcgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
securejdprop
2026-08-24 23:18:25
(1 month ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
2026-05-28 20:48:07
(4 months ago)
Web App Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 04:10:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 00:09:55.182269 2026] [security2:error] [pid 3961444:tid 3961444] [client 162.158.155.210:13079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.register-yacht-marshall-islands.com"] [uri "/.env.save"] [unique_id "ab4aEzXGUaB99ldsS6rEVAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:52:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:52:40.151940 2026] [security2:error] [pid 21049:tid 21049] [client 162.158.155.210:11253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.beepainless.com"] [uri "/.env.tmp"] [unique_id "ab3r2K49PdmmQ61WQH72vAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 09:21:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:21:04.488183 2026] [security2:error] [pid 22148:tid 22148] [client 162.158.155.210:12625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.niecy-d.com"] [uri "/.env.save"] [unique_id "ab0RgPjDnT1NQp7wjpFzywAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
