🇧🇪
madeit
2026-11-09 03:39:45
UTC ·
(3 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 14:19:17
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.86.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:19:09.118556 2026] [security2:error] [pid 26538:tid 26538] [client 162.158.86.48:9466] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.86.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:19:09.118556 2026] [security2:error] [pid 26538:tid 26538] [client 162.158.86.48:9466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.drpeppard.com"] [uri "/wp-config.php.old"] [unique_id "au8zXVPypW6Ac1wMk0AUSAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 06:59:32
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.86.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:59:27.623466 2026] [security2:error] [pid 15705:tid 15705] [client 162.158.86.48:11520] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.86.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:59:27.623466 2026] [security2:error] [pid 15705:tid 15705] [client 162.158.86.48:11520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enrimejia.com"] [uri "/.git/config"] [unique_id "au16zxVtbt0Z4CPksRlBFQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-31 09:36:38
UTC ·
(1 week ago)
Web App Attack
🇺🇸
craudiovizai
2026-10-26 12:30:37
UTC ·
(2 weeks ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
Web App Attack
Bad Web Bot
🇺🇦
URAN Publishing Service
2026-10-24 09:29:29
UTC ·
(2 weeks ago)
[24/Oct/2026:12:29:28 +0300] -- 162.158.86.48 Ban reason: Scanner [CMS_GENERIC] | Request: GET /administrator/ HTTP/1.1
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-21 20:47:56
UTC ·
(3 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 13:59:39
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 162.158.86.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:59:30.328375 2026] [security2:error] [pid 32228:tid 32228] [client 162.158.86.48:12035] M ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.86.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:59:30.328375 2026] [security2:error] [pid 32228:tid 32228] [client 162.158.86.48:12035] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vittariabeauty.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vittariabeauty.com"] [uri "/vittariabeauty.com.sql"] [unique_id "atTQwuKAO8R8PfMYjq_fBwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 13:21:28
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 162.158.86.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:21:21.636196 2026] [security2:error] [pid 11097:tid 11097] [client 162.158.86.48:14253] M ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.86.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:21:21.636196 2026] [security2:error] [pid 11097:tid 11097] [client 162.158.86.48:14253] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||qosmexico.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "qosmexico.com"] [uri "/admin/config.php.bak"] [unique_id "atTH0XGNFsF8qZuqBPfNdQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 06:55:05
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 162.158.86.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:54:57.419586 2026] [security2:error] [pid 17457:tid 17457] [client 162.158.86.48:12726] M ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.86.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:54:57.419586 2026] [security2:error] [pid 17457:tid 17457] [client 162.158.86.48:12726] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.andrew.weigel.name|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.andrew.weigel.name"] [uri "/rezerv.sql"] [unique_id "atRtQerTZxd0mFfRylUWYwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-18 05:07:55
UTC ·
(3 weeks ago)
[18/Oct/2026:08:07:54 +0300] -- 162.158.86.48 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-content/plugins/bricksforge/readme.txt HTTP/1.1
Bad Web Bot
Web App Attack
2026-10-13 23:27:13
UTC ·
(4 weeks ago)
162.158.86.48 - - [13/Oct/2026:23:27:12 +0000] "GET /wp-admin/install.php?step=1 HTTP/2.0" 404 919 "-" "http://ashleybutcher.eu/wp-admin/install.php?step=1"
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 05:43:00
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.86.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 01:42:53.768339 2026] [security2:error] [pid 28575:tid 28575] [client 162.158.86.48:9296] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.86.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 01:42:53.768339 2026] [security2:error] [pid 28575:tid 28575] [client 162.158.86.48:9296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vegasweddingvacation.com"] [uri "/.git/config"] [unique_id "as3E3YqhXEfjz4f2-oaJiwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-05 20:02:55
UTC ·
(1 month ago)
Web App Attack
2026-10-01 13:35:35
UTC ·
(1 month ago)
162.158.86.48 - - [01/Oct/2026:13:35:35 +0000] "GET /wp-admin/install.php?step=1 HTTP/2.0" 404 929 "-" "http://ashleybutcher.eu/wp-admin/install.php?step=1"
...
Bad Web Bot
Web App Attack
