๐ง๐ช
madeit
2026-09-18 22:26:49
(1 day ago)
Web App Attack
๐ฉ๐ช
MusicLibrary
2026-09-13 02:55:57
(1 week ago)
Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-08-25 07:38:01
(3 weeks ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 23:00:09
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.163.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.163.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 19:00:01.333288 2026] [security2:error] [pid 10901:tid 10901] [client 162.158.163.150:13063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moonstonenightclub.com"] [uri "/.git/HEAD"] [unique_id "aoOScYDNngcKKHJYC591FwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 02:46:07
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.163.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.163.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 22:46:01.430631 2026] [security2:error] [pid 31244:tid 31251] [client 162.158.163.150:11058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ptinct.org"] [uri "/.git/HEAD"] [unique_id "aoJ16fB7poIng_3ymJ74pwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-12 23:17:33
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.163.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.163.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 19:17:25.909475 2026] [security2:error] [pid 3579638:tid 3579638] [client 162.158.163.150:9356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.sealcoatnj.com"] [uri "/.git/config"] [unique_id "anz_BUpLJP-OPFudb96nDwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-12 02:18:07
(1 month ago)
[Wed Aug 12 04:18:05.398368 2026] [authz_core:error] [pid 18218] [client 162.158.163.150:9294] AH016 ...
show more
[Wed Aug 12 04:18:05.398368 2026] [authz_core:error] [pid 18218] [client 162.158.163.150:9294] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed Aug 12 04:18:05.880209 2026] [authz_core:error] [pid 18218] [client 162.158.163.150:9294] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed Aug 12 04:18:06.305546 2026] [authz_core:error] [pid 18218] [client 162.158.163.150:9294] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-07-26 13:46:11
(1 month ago)
[Sun Jul 26 15:46:10.225288 2026] [authz_core:error] [pid 11554] [client 162.158.163.150:10398] AH01 ...
show more
[Sun Jul 26 15:46:10.225288 2026] [authz_core:error] [pid 11554] [client 162.158.163.150:10398] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun Jul 26 15:46:10.407961 2026] [authz_core:error] [pid 11554] [client 162.158.163.150:10398] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun Jul 26 15:46:10.779767 2026] [authz_core:error] [pid 11554] [client 162.158.163.150:10398] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-07-24 06:44:42
(1 month ago)
[Fri Jul 24 08:44:40.451837 2026] [authz_core:error] [pid 24332] [client 162.158.163.150:11833] AH01 ...
show more
[Fri Jul 24 08:44:40.451837 2026] [authz_core:error] [pid 24332] [client 162.158.163.150:11833] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jul 24 08:44:40.984968 2026] [authz_core:error] [pid 24332] [client 162.158.163.150:11833] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jul 24 08:44:41.348769 2026] [authz_core:error] [pid 24332] [client 162.158.163.150:11833] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ฉ๐ช
brechtr
2026-07-24 05:02:57
(1 month ago)
[Press84-BanHammer] bad username โ Sourced from: press84.com โ Request: POST /wp-login.php
Brute-Force
๐ฉ๐ช
abdubhai
2026-07-13 08:15:46
(2 months ago)
162.158.163.150 - - [13/Jul/2026
...
Brute-Force
๐บ๐ธ
mawan
2026-06-16 21:36:08
(3 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-11 05:08:33
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.163.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.163.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 01:07:48.936087 2026] [security2:error] [pid 7402:tid 7402] [client 162.158.163.150:13956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fltsiminc.com"] [uri "/.env.backup"] [unique_id "agFkJKy0ZbTMcOgsT3TxCwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-08 12:55:25
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.163.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.163.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 08:55:08.087775 2026] [security2:error] [pid 17310:tid 17310] [client 162.158.163.150:11410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "movieheadshots.com.robertmcatee.com"] [uri "/.env.development"] [unique_id "af3dLEW6MsOOwvVT-xBnvAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-08 08:48:04
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.163.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.163.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 04:47:56.396068 2026] [security2:error] [pid 4964:tid 4975] [client 162.158.163.150:9617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plasticsurgeryadvertising.aafm.us"] [uri "/.git/config"] [unique_id "af2jPGoB3S1v8jz4Tu7asAAAAQk"]
show less
Brute-Force
Bad Web Bot
Web App Attack