🇧🇪
madeit
2026-10-19 22:47:34
(1 day ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 01:25:16
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 21:25:11.875661 2026] [security2:error] [pid 15774:tid 15817] [client 162.158.155.96:10172] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.super-8mm.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.super-8mm.com"] [uri "/index.php.bak"] [unique_id "ar22d69kX7kI_J6nmPtdrQAAAYI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 10:24:04
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:23:56.120717 2026] [security2:error] [pid 24576:tid 24576] [client 162.158.155.96:12771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clossglobal.com"] [uri "/.htaccess"] [unique_id "arzjPPl9sdNp5LHqBJReuwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 07:08:39
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:08:32.378379 2026] [security2:error] [pid 26345:tid 26345] [client 162.158.155.96:12286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "participation.direct"] [uri "/wp-config.php"] [unique_id "ary1cBtOeYhgG4AYJ5PWhAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 06:39:12
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 02:39:05.397991 2026] [security2:error] [pid 19645:tid 19645] [client 162.158.155.96:10173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lollytalk.com"] [uri "/.htaccess"] [unique_id "aryuiX4ZugDTatSMRtrgJAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 00:56:29
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:56:26.166156 2026] [security2:error] [pid 6847:tid 6847] [client 162.158.155.96:13165] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ellavandeven.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ellavandeven.com"] [uri "/index.php.bak"] [unique_id "arxeOhgvmDnRELIXrWyo4AAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 19:29:34
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 15:29:30.719336 2026] [security2:error] [pid 6921:tid 6921] [client 162.158.155.96:11392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.flavornet.org"] [uri "/.htaccess"] [unique_id "arwRmuRdkvKfacfXlmBWAwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 17:35:53
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 13:35:46.477302 2026] [security2:error] [pid 5407:tid 5407] [client 162.158.155.96:10336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.drunkenmonkeystyle.com"] [uri "/.htaccess"] [unique_id "arv28oqu4uyHLK7CtUL3QQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 21:10:59
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:10:54.744946 2026] [security2:error] [pid 8441:tid 8441] [client 162.158.155.96:10446] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||globalsolutions.technology|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "globalsolutions.technology"] [uri "/index.php.bak"] [unique_id "arrX3t2h6nxhT0hZwZLfmAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 13:06:56
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 09:06:51.381246 2026] [security2:error] [pid 6471:tid 6488] [client 162.158.155.96:9434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vote4joegardner.com"] [uri "/.htaccess"] [unique_id "arpma6EFFgSPyL3WncT2igAAAI8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
acadeova
2026-04-20 01:35:22
(6 months ago)
🚨 Recon detected (nft drop)
SRC=162.158.155.96
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(jour ...
show more
🚨 Recon detected (nft drop)
SRC=162.158.155.96
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
🇺🇸
octageeks.com
2026-04-10 04:09:04
(6 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
mnsf
2026-04-09 02:05:37
(6 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 16:16:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 12:16:17.336229 2026] [security2:error] [pid 991:tid 991] [client 162.158.155.96:10262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.picayunity.com"] [uri "/.env.json"] [unique_id "ab7EUZlmFUVfor_r57SurAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:15:46
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:15:42.124513 2026] [security2:error] [pid 4728:tid 4728] [client 162.158.155.96:12404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.panmaneecnc.com"] [uri "/config/.env.local"] [unique_id "ab3jLowVvzG0hhKhJGuDnAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
