🇺🇸
TPI-Abuse
2026-10-14 15:32:33
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 11:32:20.008438 2026] [security2:error] [pid 30596:tid 30596] [client 162.158.23.56:13554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "machineryenchantress.com"] [uri "/.env.staging"] [unique_id "as-ghPY1ocC7rcUoWnKmJQAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-14 01:56:54
(23 hours ago)
[14/Oct/2026:04:56:53 +0300] -- 162.158.23.56 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET / ...
show more
[14/Oct/2026:04:56:53 +0300] -- 162.158.23.56 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /config.json HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:47:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:47:47.370819 2026] [security2:error] [pid 20536:tid 20536] [client 162.158.23.56:11908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clarktec.com"] [uri "/.env.staging"] [unique_id "as61E1NrlQ6BrNUlFmQzUAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-10-13 21:36:57
(1 day ago)
vulnerability scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 10:44:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 06:44:49.501653 2026] [security2:error] [pid 8129:tid 8129] [client 162.158.23.56:13642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photospecialties.net"] [uri "/.env.bak"] [unique_id "as4LoZNjx1Xm9XiDgL_-ZAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-12 17:34:46
(2 days ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-12 04:30:46
(2 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 08:22:58
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 04:22:52.651092 2026] [security2:error] [pid 30425:tid 30425] [client 162.158.23.56:12243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "natural-history-conservation.com"] [uri "/.env.save"] [unique_id "astHXLO_iYQJ8S1vqfGYmgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 02:47:26
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 22:47:19.962863 2026] [security2:error] [pid 2345:tid 2345] [client 162.158.23.56:11840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.greenroomonline.org"] [uri "/wp-config.php.bak"] [unique_id "asr4t_A_IH2cq54k8yHZIgAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 18:31:33
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 14:31:28.063758 2026] [security2:error] [pid 638:tid 666] [client 162.158.23.56:10660] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gemini.pe|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gemini.pe"] [uri "/.terraform/terraform.tfstate.backup"] [unique_id "askzALXejpPs04p-XT-n7wAAANU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-09 14:48:30
(5 days ago)
162.158.23.56 - - [09/Oct/2026:14:48:30 +0000] "GET /.git/config HTTP/2.0" 302 0 "-" "Mozilla/5.0 (W ...
show more
162.158.23.56 - - [09/Oct/2026:14:48:30 +0000] "GET /.git/config HTTP/2.0" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0"
...
show less
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-09 08:49:35
(5 days ago)
[09/Oct/2026:11:49:34 +0300] -- 162.158.23.56 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env ...
show more
[09/Oct/2026:11:49:34 +0300] -- 162.158.23.56 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.local HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 03:47:43
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 23:47:39.488165 2026] [security2:error] [pid 21090:tid 21095] [client 162.158.23.56:13381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "havacubvision.com"] [uri "/.git/config"] [unique_id "aryGW_aRMwdfGP80bvLlIwAAAUM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-07 19:33:21
(2 months ago)
Web App Attack
🇦🇺
oncord
2025-12-23 19:07:36
(9 months ago)
Form spam
Web Spam
