🇺🇸
TPI-Abuse
2026-10-01 15:24:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 11:24:07.341859 2026] [security2:error] [pid 25779:tid 25779] [client 162.158.155.9:12940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.comicpreservation.com"] [uri "/.htaccess"] [unique_id "ar57F3wxK4TLlecYJCqbnwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 04:47:11
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 00:47:05.664928 2026] [security2:error] [pid 26031:tid 26031] [client 162.158.155.9:13208] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||architx.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "architx.com"] [uri "/index.php.bak"] [unique_id "ar3lycL-BWsS6D12afvfHwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 12:41:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 08:41:49.545983 2026] [security2:error] [pid 21985:tid 21985] [client 162.158.155.9:13145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1healthplace.com"] [uri "/wp-config.php.bak"] [unique_id "ar0DjdTBYZvN5-m9-7_FAAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 05:45:09
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 01:45:04.513564 2026] [security2:error] [pid 8369:tid 8369] [client 162.158.155.9:13369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.peterjohnsonauthor.com"] [uri "/.htaccess"] [unique_id "aryh4Er46iPGsy78G8ZgJgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 23:20:50
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 19:20:44.090993 2026] [security2:error] [pid 4911:tid 4911] [client 162.158.155.9:12895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fgrotary.org"] [uri "/.htaccess"] [unique_id "arxHzLG1tsZ-Z0ldA90AqwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 19:31:20
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 15:31:16.229266 2026] [security2:error] [pid 15088:tid 15088] [client 162.158.155.9:13270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garon.us"] [uri "/.htaccess"] [unique_id "arwSBF9LlSx2B0A2xsGDdwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 04:47:54
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 00:47:46.276523 2026] [security2:error] [pid 21491:tid 21491] [client 162.158.155.9:12987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cnwire.com"] [uri "/wp-config.php"] [unique_id "artC8mG3YCnMfJlLnYci5gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 00:25:58
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:25:53.535758 2026] [security2:error] [pid 31170:tid 31170] [client 162.158.155.9:11218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.myersbarnescpa.com"] [uri "/.htaccess"] [unique_id "arsFkY-9ma3SzMjPN2IrPwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 21:59:12
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:59:09.084960 2026] [security2:error] [pid 30850:tid 30918] [client 162.158.155.9:11482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sailcleaner.com"] [uri "/.htaccess"] [unique_id "arrjLThRclJ7zMS5ztYIwQAAAdc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 12:07:11
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 08:07:05.861078 2026] [security2:error] [pid 23944:tid 23944] [client 162.158.155.9:9522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "microscope.modelengines.info"] [uri "/.htaccess"] [unique_id "arpYaXpVfgx2zQLeZOFAvAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-26 01:24:03
(1 week ago)
Web App Attack
🇧🇪
madeit
2026-09-10 17:03:32
(3 weeks ago)
Web App Attack
🇧🇪
madeit
2026-08-31 15:43:42
(1 month ago)
Web App Attack
🇮🇩
securejdprop
2026-08-21 08:24:02
(1 month ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇺🇸
TPI-Abuse
2026-08-19 04:07:14
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 00:07:08.918987 2026] [security2:error] [pid 1897:tid 1897] [client 162.158.155.9:11357] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.thechildrenscharity.net"] [uri "/.git/config"] [unique_id "aoUr7JXu3k-qwcuNOMBv6QAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
