🇺🇸
craudiovizai
2026-09-26 06:30:31
UTC ·
(1 month ago)
Automated honeypot detection. blocked ip against a Next.js application. Paths: /wp-admin/install.php?step=1, /wp-admin/install.php. Blocked at the edge.
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-26 04:39:47
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.182.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 00:39:44.861769 2026] [security2:error] [pid 28107:tid 28107] [client 162.158.182.55:9650] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.182.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 00:39:44.861769 2026] [security2:error] [pid 28107:tid 28107] [client 162.158.182.55:9650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wordspectrum.com"] [uri "/.git/config"] [unique_id "ardMkJSwrVC1N_wT2MLohAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-09-26 04:23:12
UTC ·
(1 month ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
craudiovizai
2026-09-25 12:30:38
UTC ·
(1 month ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
Web App Attack
Bad Web Bot
🇬🇧
ISPLtd
2026-09-25 03:09:50
UTC ·
(1 month ago)
162.158.182.55 - - [25/Sep/2026:00:09:50 -0300] "GET /wp-PII/install.php?step=1
162.158.182.55 - - [25/Sep/2026:00:09:50 -0300] "GET /wp-PII/install.php?step=1
...
Hacking
Web App Attack
🇳🇴
jad-abuse
2026-09-24 05:55:31
UTC ·
(1 month ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_admin. Observed by 1 sensor(s); 3 hits.
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-05 22:00:58
UTC ·
(2 months ago)
Auto-ban: >3000 req/min op 2026-09-05
Web App Attack
SSH
Hacking
🇧🇪
madeit
2026-08-24 00:19:36
UTC ·
(2 months ago)
Web App Attack
🇳🇴
jad-abuse
2026-08-23 12:19:26
UTC ·
(2 months ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_admin. Observed by 1 sensor(s); 2 hits.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 06:17:52
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.182.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 02:17:46.428133 2026] [security2:error] [pid 2802:tid 2802] [client 162.158.182.55:9905] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.182.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 02:17:46.428133 2026] [security2:error] [pid 2802:tid 2802] [client 162.158.182.55:9905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.powerlinemultimedia.net"] [uri "/.git/config"] [unique_id "aoVKikkAiwrXqfvQ1eE3oAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 05:06:43
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.182.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 01:06:37.753647 2026] [security2:error] [pid 25146:tid 25146] [client 162.158.182.55:10638] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.182.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 01:06:37.753647 2026] [security2:error] [pid 25146:tid 25146] [client 162.158.182.55:10638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.thecalls.net"] [uri "/.git/config"] [unique_id "aoU53TEdVVj3sNJFfxEYGgAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 02:59:57
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.182.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 22:59:51.329921 2026] [security2:error] [pid 11346:tid 11346] [client 162.158.182.55:10016] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.182.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 22:59:51.329921 2026] [security2:error] [pid 11346:tid 11346] [client 162.158.182.55:10016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nyctrademarklawyerscom.karenbernsteinlaw.net"] [uri "/.git/config"] [unique_id "aoUcJw1TF01GZV_O4uizHAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 08:50:56
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.182.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:50:49.561966 2026] [security2:error] [pid 30906:tid 30906] [client 162.158.182.55:13635] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.182.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:50:49.561966 2026] [security2:error] [pid 30906:tid 30906] [client 162.158.182.55:13635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.rahjx.net"] [uri "/.git/config"] [unique_id "aoLLaQlJ7yDmKwunxuHF_AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 01:22:35
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.182.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 21:22:30.381977 2026] [security2:error] [pid 12062:tid 12062] [client 162.158.182.55:13633] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.182.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 21:22:30.381977 2026] [security2:error] [pid 12062:tid 12062] [client 162.158.182.55:13633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.advantage-plus.net"] [uri "/.git/HEAD"] [unique_id "aoJiVlfi3ZQB6t7jBdHKmQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇬
Stoyko Stoykov
2026-08-09 22:19:08
UTC ·
(2 months ago)
162.158.182.55 - - [10/Aug/2026:01:19:08 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 162 "-" "-"
...
Hacking
Web App Attack