🇫🇷
dynamix
2026-10-13 14:36:36
(1 day ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-09-29 18:10:11
(2 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 12:55:43
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 08:55:37.838967 2026] [security2:error] [pid 26702:tid 26754] [client 162.158.63.225:12596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dulemba.com"] [uri "/.htaccess"] [unique_id "aru1SZE36hnmISwNL4bJrgAAAYA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 18:37:12
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:37:05.947399 2026] [security2:error] [pid 20470:tid 20597] [client 162.158.63.225:13075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.woadwellness.com"] [uri "/.htaccess"] [unique_id "arqz0ViBZRf5NBk6T_2yCwAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 15:08:30
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 11:08:25.969505 2026] [security2:error] [pid 32740:tid 32740] [client 162.158.63.225:9523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kaleidoscope-glass.com"] [uri "/wp-config.php"] [unique_id "arqC6dvvXi9F8sHE5J7fTgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-18 09:19:40
(3 weeks ago)
Aggressive web scan
Web App Attack
🇨🇭
backslash
2026-09-09 14:33:00
(1 month ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot
🇧🇪
madeit
2026-08-05 00:07:46
(2 months ago)
Web App Attack
🇩🇪
femboy.cat
2026-06-19 22:52:19
(3 months ago)
Port scan to tcp/8443 from 162.158.63.225
Brute-Force
🇺🇸
TPI-Abuse
2026-06-19 10:42:32
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 06:42:25.738016 2026] [security2:error] [pid 17495:tid 17495] [client 162.158.63.225:11364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "campconcerto.com"] [uri "/.env.backup"] [unique_id "ajUdEfPfs3JMGFlUE6s8AwAAAAA"], referer: https://www.google.com/search?q=campconcerto.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
acadeova
2026-06-05 09:07:03
(4 months ago)
🚨 Recon detected (nft drop)
SRC=162.158.63.225
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(jour ...
show more
🚨 Recon detected (nft drop)
SRC=162.158.63.225
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
🇺🇸
mawan
2026-04-09 16:24:04
(6 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇵🇱
IROK
2026-04-02 09:52:11
(6 months ago)
Malware/WebShell Scan blocked by ModSecurity
...
Hacking
🇺🇸
TPI-Abuse
2026-03-22 12:18:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 08:18:07.523276 2026] [security2:error] [pid 7994:tid 7994] [client 162.158.63.225:10584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.eurosoni.com"] [uri "/.env~"] [unique_id "ab_d_5NsMNkjD59Z82ZxmwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 07:52:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:52:02.243998 2026] [security2:error] [pid 2914:tid 2914] [client 162.158.63.225:10505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.enlightened-workplace.com"] [uri "/.env.development"] [unique_id "abz8oh5D66ACBbtbVNdLtAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
