🇫🇷
dynamix
2026-09-14 09:46:26
(1 week ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-08-28 21:47:43
(3 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 02:18:16
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 22:18:09.273068 2026] [security2:error] [pid 8586:tid 8586] [client 162.158.78.209:11448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.hayrun.com"] [uri "/.git/config"] [unique_id "aoe1YQpJeO5i4_ikdBkw9QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 13:13:42
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 09:13:38.164625 2026] [security2:error] [pid 6648:tid 6648] [client 162.158.78.209:11790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.campnecon.com"] [uri "/.git/HEAD"] [unique_id "aoMJAlVxlyTg83f-5qQArAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 11:21:19
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 07:21:13.629849 2026] [security2:error] [pid 21628:tid 21628] [client 162.158.78.209:10897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "connectigramme.com"] [uri "/.git/HEAD"] [unique_id "aoLuqdYkW-l8svquIRJ1qwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 05:20:09
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 01:19:59.149266 2026] [security2:error] [pid 1658:tid 1658] [client 162.158.78.209:10307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.schoolsliaisoncommunity.net"] [uri "/.git/config"] [unique_id "aoKZ_4-mt_LyyjZr2t3F9wAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 16:57:53
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 12:57:45.863964 2026] [security2:error] [pid 14774:tid 14774] [client 162.158.78.209:26341] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.deafinitely.com|F|2"] [data "[email protected] "] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.deafinitely.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "al5TibCVRp09D0pM4KolRwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
COMPLEX
2026-05-29 00:44:14
(3 months ago)
Unsolicited TCP traffic | Action: DROP | Port 443
Phishing
🇳🇱
homeshowdomain.nl
2026-05-14 22:06:07
(4 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-13.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-05-09 20:36:47
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 16:36:44.124516 2026] [security2:error] [pid 19079:tid 19079] [client 162.158.78.209:11188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pulleasy.com"] [uri "/.git/config"] [unique_id "af-a3Fga0--mkUc-44vUtQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-04-06 22:05:34
(5 months ago)
Scanning/Probing (13)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-04-03 02:05:35
(5 months ago)
Scanning/Probing (21)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-03-31 11:05:58
(5 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-03-30 10:05:32
(5 months ago)
Scanning/Probing (15)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 11:12:31
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.78.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 07:12:19.415268 2026] [security2:error] [pid 24000:tid 24000] [client 162.158.78.209:10386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.4115thewestford.com"] [uri "/.env.development"] [unique_id "acZmExIiCdmF1ut-ZbO00AAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
