🇩🇪
4server
2026-10-12 21:11:48
(2 hours ago)
[MonOct1223:11:46.2611462026][security2:error][pid141636:tid141736][client162.158.22.9:0]ModSecurity ...
show more
[MonOct1223:11:46.2611462026][security2:error][pid141636:tid141736][client162.158.22.9:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"titrasloco.com\"][uri\"//.aws/credentials\"][unique_id\"as1NEkexjLrU6wenzZXCwQAAAUk\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 03:57:34
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 23:57:30.942215 2026] [security2:error] [pid 24958:tid 24958] [client 162.158.22.9:12690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "straypointers.com"] [uri "/.env"] [unique_id "asxaqprt3KWEg9F_uDfQVwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 07:56:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 03:56:53.468722 2026] [security2:error] [pid 31745:tid 31745] [client 162.158.22.9:12707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cleanbuildingservices.com"] [uri "/.env.bak"] [unique_id "astBRagsj2rjuNS2PvL3RgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 07:12:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 03:12:36.428210 2026] [security2:error] [pid 32736:tid 32763] [client 162.158.22.9:9854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.property-management.company"] [uri "/wp-config.php.bak"] [unique_id "ass25OjUupi4xOYg_dMVyQAAAJg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 04:23:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 00:23:04.650707 2026] [security2:error] [pid 1799:tid 1799] [client 162.158.22.9:12096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nickersoncarpentry.com"] [uri "/.env.old"] [unique_id "assPKOH8e2hjt6ypdzI6TwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 00:53:00
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 20:52:53.252264 2026] [security2:error] [pid 15404:tid 15404] [client 162.158.22.9:14254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "suswastima.com"] [uri "/.env.backup"] [unique_id "asrd5WtjcMyckStRWeHTbgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 05:22:39
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 01:22:32.209570 2026] [security2:error] [pid 31578:tid 31578] [client 162.158.22.9:13326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialalchemy.com"] [uri "/.env.old"] [unique_id "asnLmLmOJBMq_CpI5jqr6AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 17:47:25
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 13:47:16.810526 2026] [security2:error] [pid 27366:tid 27366] [client 162.158.22.9:11809] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leadek.com"] [uri "/.env.dev"] [unique_id "askopAXQsVRVuJGAXbcLgAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 14:57:53
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 10:57:46.626172 2026] [security2:error] [pid 20098:tid 20181] [client 162.158.22.9:10421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mailme.name"] [uri "/.env.production"] [unique_id "askA6mLl-ZMbMOsLLlokfwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 10:04:26
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 06:04:17.774682 2026] [security2:error] [pid 26781:tid 26781] [client 162.158.22.9:13171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "djemjaybeats.com"] [uri "/wp-config.php"] [unique_id "asi8IfYcJ4ttetvimgrNYwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 15:04:23
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 11:04:16.462700 2026] [security2:error] [pid 20154:tid 20154] [client 162.158.22.9:10663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ati.software"] [uri "/.git/config"] [unique_id "arqB8E8QFUo81XzoPKt3oAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-05-12 02:59:47
(5 months ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-03-02 21:00:00
(7 months ago)
Multiple WAF Violations
Web App Attack
🇫🇷
PacketFilter
2025-04-11 08:15:30
(1 year ago)
Fail2Ban
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-04-07 12:14:48
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.22.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 08:14:12.961865 2025] [security2:error] [pid 14985:tid 14985] [client 162.158.22.9:47468] [client 162.158.22.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ruralcommunitycare.org"] [uri "/old/.git/config"] [unique_id "Z_PBlEOniPRNyTFp-vRoigAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
