๐บ๐ธ
mawan
2026-05-16 16:39:05
(5 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-09 07:57:38
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 03:57:32.324018 2026] [security2:error] [pid 31704:tid 31704] [client 162.158.87.25:12645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jasonpolland.com"] [uri "/.git/config"] [unique_id "af7o7Fc7lC9SWT1I4xzfWAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-08 10:46:32
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 06:46:26.109759 2026] [security2:error] [pid 23789:tid 23789] [client 162.158.87.25:9245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "explorediablo.com"] [uri "/.git/config"] [unique_id "af2_AnLxoAspDkaBDctm2QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-08 07:55:59
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 03:55:51.968761 2026] [security2:error] [pid 13520:tid 13520] [client 162.158.87.25:13444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "assheton.com"] [uri "/.git/config"] [unique_id "af2XB2uMfi9147ds0FvZzQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-30 05:52:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 01:52:06.953794 2026] [security2:error] [pid 17344:tid 17344] [client 162.158.87.25:12500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.elsmithpest.com"] [uri "/.git/config"] [unique_id "afLuBu9zhRM1quK5N_Yv-AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-30 03:56:42
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 23:56:35.937398 2026] [security2:error] [pid 11759:tid 11759] [client 162.158.87.25:14182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.depololaw.com"] [uri "/.git/config"] [unique_id "afLS86wbCgF76qPRbMF8OAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-29 18:48:46
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 14:48:41.570185 2026] [security2:error] [pid 9493:tid 9493] [client 162.158.87.25:12517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.couturebikini.com"] [uri "/.git/config"] [unique_id "afJSieXDhaBBH0ahBjf8wAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-29 12:32:55
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 08:32:48.326405 2026] [security2:error] [pid 20584:tid 20584] [client 162.158.87.25:11330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ambarsolar.com"] [uri "/.git/config"] [unique_id "afH6cI3-797ryn6nn7_hzwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-04-20 03:11:26
(5 months ago)
2026-04-20T05:10:54.330558+02:00 nimbus sshd[262705]: pam_unix(sshd:auth): authentication failure; l ...
show more
2026-04-20T05:10:54.330558+02:00 nimbus sshd[262705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.158.87.25
2026-04-20T05:10:56.579236+02:00 nimbus sshd[262705]: Failed password for invalid user ali from 162.158.87.25 port 19456 ssh2
2026-04-20T05:11:25.685199+02:00 nimbus sshd[262747]: Invalid user sammy from 162.158.87.25 port 46328
...
show less
Brute-Force
SSH
Anonymous
2026-04-18 12:50:06
(5 months ago)
| SQL injection attempt.
Web App Attack
Hacking
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-04-11 04:30:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 00:30:52.194790 2026] [security2:error] [pid 2332068:tid 2332068] [client 162.158.87.25:11952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.invisiblecitydesigns.com"] [uri "/.git/config"] [unique_id "adnOfGOAqMhxWXILIsJCXAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
abdubhai
2026-04-09 00:49:42
(6 months ago)
162.158.87.25 - - [09/Apr/2026:0
...
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-04-08 06:40:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.87.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 02:40:16.430819 2026] [security2:error] [pid 3773818:tid 3773818] [client 162.158.87.25:13199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.pattifox.com"] [uri "/.git/HEAD"] [unique_id "adX4UOkAEnphYW5rm3fQ0AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-04-07 09:06:25
(6 months ago)
Excessive 404/403 errors
Brute-Force
๐ณ๐ฑ
BlueWire Hosting
2026-04-06 23:28:23
(6 months ago)
Probing websites for vulnerabilities
Web App Attack