🇺🇸
TPI-Abuse
2026-10-01 03:15:09
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 23:15:02.131269 2026] [security2:error] [pid 14296:tid 14296] [client 162.158.155.47:12031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fusionrep.com"] [uri "/.git/config"] [unique_id "ar3QNh2YjimB08FxF2AFXgAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 14:26:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 10:26:47.587943 2026] [security2:error] [pid 7400:tid 7400] [client 162.158.155.47:11881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sumilondon.com"] [uri "/wp-config.php.bak"] [unique_id "ar0cJzBhaqvh4zL-BrXR2wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 13:27:11
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 09:27:04.496120 2026] [security2:error] [pid 14349:tid 14349] [client 162.158.155.47:11462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "birthplaceofprohockey.org"] [uri "/wp-config.php"] [unique_id "aru8qCMEC9CFF228YNU0BwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 12:58:07
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 08:58:01.400752 2026] [security2:error] [pid 31247:tid 31247] [client 162.158.155.47:10974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dishoneggs.com"] [uri "/.htaccess"] [unique_id "aru12Ruv56iZyECyTQwZzgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 00:33:19
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:33:16.024727 2026] [security2:error] [pid 26337:tid 26337] [client 162.158.155.47:14004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pilates-slings.eu"] [uri "/wp-config.php"] [unique_id "arsHTOoVP6LflhBT_o6NJgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 23:23:39
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 19:23:34.871979 2026] [security2:error] [pid 30358:tid 30358] [client 162.158.155.47:11268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sarahpeebles.net"] [uri "/.htaccess"] [unique_id "arr29mfjsLkVE3nuP0mPigAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 08:25:08
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 04:25:03.931697 2026] [security2:error] [pid 7623:tid 7623] [client 162.158.155.47:10435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deborahbein.com"] [uri "/wp-config.php.bak"] [unique_id "arokX1RngFKdeRysCYOMpgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-21 15:33:54
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 04:21:52
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 00:21:46.215979 2026] [security2:error] [pid 13225:tid 13225] [client 162.158.155.47:11368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.tribalvisions.net"] [uri "/.git/HEAD"] [unique_id "aoUvWtvYHWs8quBApJWx4gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-26 20:22:01
(2 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 01:11:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 21:11:27.297942 2026] [security2:error] [pid 16987:tid 16987] [client 162.158.155.47:11354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.davesastro.com"] [uri "/.env.local"] [unique_id "abyev_hGzFaB2-UyR59PygAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:23:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:22:59.847521 2026] [security2:error] [pid 1183:tid 1183] [client 162.158.155.47:11679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mofcolorado.com.mykelmilur.com"] [uri "/app/.env"] [unique_id "abyTY7Ld87_CvZT5ZfXRfAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:06:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:05:55.526843 2026] [security2:error] [pid 12442:tid 12442] [client 162.158.155.47:9319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.evolinc.com"] [uri "/.env.json"] [unique_id "abvYkzCDopd9jf8v-416nwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:47:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:47:23.208006 2026] [security2:error] [pid 29363:tid 29363] [client 162.158.155.47:11370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.arzoma.com"] [uri "/.env.backup"] [unique_id "abvUO8fAcRFWLTVWyfQ2RQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 09:27:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:27:51.332687 2026] [security2:error] [pid 4193:tid 4193] [client 162.158.155.47:11912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "networkzone.org"] [uri "/docker/.env"] [unique_id "abvBl_S6EG_DvZr5sPlaHQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
