🇺🇸
TPI-Abuse
2026-05-25 17:29:05
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 13:29:00.444004 2026] [security2:error] [pid 14833:tid 14833] [client 162.158.79.157:9760] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.usbea.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.usbea.com"] [uri "/db_backup.sql"] [unique_id "ahSG3Ed_hAXMvgIDCv_CegAAAAM"], referer: https://www.google.com/search?q=www.usbea.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 08:39:32
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:37:47.012022 2026] [security2:error] [pid 31637:tid 31637] [client 162.158.79.157:10572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newlife12steprecovery.intnlc.org"] [uri "/.env"] [unique_id "agbbWw1Q0kaV5tpggzx2QAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 06:40:53
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 02:39:31.979032 2026] [security2:error] [pid 26323:tid 26323] [client 162.158.79.157:10217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atlanticcitypartybuses.com"] [uri "/.env.vercel"] [unique_id "aga_o4tTqg-pfFEi7lxGXQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
S.O.B.A. Dev.
2026-05-09 01:11:14
(1 month ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇺🇸
TPI-Abuse
2026-03-26 23:27:16
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 19:27:11.502847 2026] [security2:error] [pid 9666:tid 9666] [client 162.158.79.157:9242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stage.cormanleigh.com"] [uri "/.env.backup"] [unique_id "acXAz8TDjvi2DVn3D-w6RAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 19:47:56
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 15:47:49.826009 2026] [security2:error] [pid 6284:tid 6284] [client 162.158.79.157:11926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bowdens-landing.com"] [uri "/app/.env"] [unique_id "acWNZZ-6uzA7lP4xfJtEfgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 17:40:10
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 13:39:52.798824 2026] [security2:error] [pid 15706:tid 15706] [client 162.158.79.157:10056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.elgautobody.com"] [uri "/.env.production.local"] [unique_id "acVvaO0Ux_u_qk3ChhPPcAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 13:29:04
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 09:28:50.175154 2026] [security2:error] [pid 19984:tid 19984] [client 162.158.79.157:14128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.silvermoonpizza.com"] [uri "/.env.tmp"] [unique_id "acU0kor_qNS894oqKQUZkAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 15:38:02
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 11:37:19.460765 2026] [security2:error] [pid 986:tid 1009] [client 162.158.79.157:11325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.honorac.com"] [uri "/.env.dist"] [unique_id "acQBLzPDgrIgzQznXTu-XgAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
threatintelligence_bvc
2026-03-22 14:14:32
(2 months ago)
Brute-Force
🇺🇸
mnsf
2026-03-21 01:06:55
(2 months ago)
Scanning/Probing (19)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-03-20 00:08:22
(2 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 17:08:33
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.79.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 12:08:27.615585 2026] [security2:error] [pid 22304:tid 22304] [client 162.158.79.157:13171] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ahuramazda.com|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ahuramazda.com"] [uri "/.aws/credentials.old"] [unique_id "aY9ai4keQNkpCzX273cZ9wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
abdubhai
2025-12-28 21:09:53
(5 months ago)
162.158.79.157 - - [29/Dec/2025:
...
Brute-Force
🇩🇪
abdubhai
2025-12-17 22:09:52
(6 months ago)
162.158.79.157 - - [18/Dec/2025:
...
Brute-Force