🇺🇸
TPI-Abuse
2026-09-29 21:39:40
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 17:39:32.685463 2026] [security2:error] [pid 26830:tid 26830] [client 162.158.155.28:12625] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nnrentacar.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nnrentacar.com"] [uri "/index.php.bak"] [unique_id "arwwFNzkBzWmT69PG86M5wAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 20:24:24
(3 hours ago)
(mod_security) mod_security (id:210730) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:24:20.417724 2026] [security2:error] [pid 11641:tid 11641] [client 162.158.155.28:10225] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||wailthelifeofbudpowell.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wailthelifeofbudpowell.com"] [uri "/index.php.bak"] [unique_id "arwedNYoQdcg94cNqPwucwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 13:21:12
(10 hours ago)
(mod_security) mod_security (id:210730) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 09:21:07.872478 2026] [security2:error] [pid 23460:tid 23460] [client 162.158.155.28:10076] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jeffhinkley.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jeffhinkley.com"] [uri "/index.php.bak"] [unique_id "aru7Q1BcDh6sJsUci4Zr0QAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 07:43:26
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 03:43:20.092013 2026] [security2:error] [pid 26767:tid 26767] [client 162.158.155.28:13574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.majesticsolutions.co"] [uri "/.htaccess"] [unique_id "artsGGKaDbpL7gmWZfWdXwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 06:55:43
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 02:55:37.401200 2026] [security2:error] [pid 9893:tid 9893] [client 162.158.155.28:10924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gracefaerie.com"] [uri "/wp-config.php"] [unique_id "artg6Vd-EEdHJ1WZO-NDZQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 22:02:29
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 18:02:22.459899 2026] [security2:error] [pid 28439:tid 28492] [client 162.158.155.28:10048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.garyanddani.com"] [uri "/.git/HEAD"] [unique_id "ao4Q7nvzyLG6Vk8SGPstKwAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-01 04:21:10
(4 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-04-20 22:04:04
(5 months ago)
Auto-ban: >3000 req/min op 2026-04-20
Web App Attack
SSH
Hacking
🇺🇸
octageeks.com
2026-04-08 04:06:15
(5 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:09:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:09:01.733805 2026] [security2:error] [pid 2807:tid 2807] [client 162.158.155.28:9364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ondakompun.com"] [uri "/.env.test"] [unique_id "ab3hnf5QAZKDHfsSiOtFPwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 05:57:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 01:57:26.105269 2026] [security2:error] [pid 1327:tid 1327] [client 162.158.155.28:12164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.srippy.com"] [uri "/www/.env"] [unique_id "abzhxsG951UOmHV8dsC4QQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 05:30:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 01:30:14.227769 2026] [security2:error] [pid 12931:tid 12931] [client 162.158.155.28:13380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.jojofarmsohio.com"] [uri "/.env.production.bak"] [unique_id "abzbZks5k7-BAVu1D0LkwwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 02:12:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:12:08.321017 2026] [security2:error] [pid 25022:tid 25022] [client 162.158.155.28:12496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.abbysue.com"] [uri "/.env.save"] [unique_id "abys-EsKw_cXZlOKce9fVwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 01:53:34
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 21:53:29.349809 2026] [security2:error] [pid 3064:tid 3064] [client 162.158.155.28:10029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "margroberts.com"] [uri "/.env.container"] [unique_id "abyombA_8wSt7wAA92kXSwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:11:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:11:47.186290 2026] [security2:error] [pid 24153:tid 24153] [client 162.158.155.28:10590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.codeem.tremulant.com"] [uri "/root/.env"] [unique_id "abvZ80mUzp_wP5CDHUqIVAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
