🇺🇸
TPI-Abuse
2026-11-14 17:19:42
UTC ·
(9 minutes ago)
(mod_security) mod_security (id:210730) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:19:39.705042 2026] [security2:error] [pid 18814:tid 18814] [client 162.158.94.124:10541] ...
show more
(mod_security) mod_security (id:210730) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:19:39.705042 2026] [security2:error] [pid 18814:tid 18814] [client 162.158.94.124:10541] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||teenaarunoceans.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "teenaarunoceans.com"] [uri "/index.php.bak"] [unique_id "aviYK0sgzLb317X0BOgjfAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 13:27:03
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 09:26:56.986294 2026] [security2:error] [pid 5037:tid 5037] [client 162.158.94.124:13241] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 09:26:56.986294 2026] [security2:error] [pid 5037:tid 5037] [client 162.158.94.124:13241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextlevelcharge.com"] [uri "/.git/config"] [unique_id "akZnIDUZ2V6jGmGJuqO0wQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-06-22 13:27:12
UTC ·
(4 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
2026-06-14 23:00:03
UTC ·
(4 months ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇨🇦
dispensight
2026-05-16 01:12:34
UTC ·
(5 months ago)
Automated WordPress exploit probe via honeydomain. UA: dispensight.buzz. Cloudflare Germany proxy.
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-07 03:50:22
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 23:49:55.209870 2026] [security2:error] [pid 1112835:tid 1112835] [client 162.158.94.124:10 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 23:49:55.209870 2026] [security2:error] [pid 1112835:tid 1112835] [client 162.158.94.124:10285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.intergalactichumans.com.mroxygen.org"] [uri "/.env.local"] [unique_id "adR-46fXDTZeC0oDIlC0AgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 05:55:46
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 01:55:34.436792 2026] [security2:error] [pid 8232:tid 8232] [client 162.158.94.124:13966] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 01:55:34.436792 2026] [security2:error] [pid 8232:tid 8232] [client 162.158.94.124:13966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "canonflorida.com"] [uri "/.env.test"] [unique_id "adCn1gT_3ReW32MiEsOCIwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-03-31 03:35:19
UTC ·
(7 months ago)
Restricted File Access Attempt. Matched phrase "/.git/" at REQUEST_FILENAME. (930130-122)
Hacking
Web App Attack
🇺🇸
mnsf
2026-03-30 03:05:50
UTC ·
(7 months ago)
Scanning/Probing (18)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 00:01:45
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 20:01:40.025326 2026] [security2:error] [pid 18246:tid 18246] [client 162.158.94.124:10403] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 20:01:40.025326 2026] [security2:error] [pid 18246:tid 18246] [client 162.158.94.124:10403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.trompelart.com"] [uri "/.git/refs/heads/main"] [unique_id "acm9ZPEaV0ALUW7N_XlNwwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-03-21 02:41:12
UTC ·
(7 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 01:42:04
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:41:58.018730 2026] [security2:error] [pid 17395:tid 17395] [client 162.158.94.124:9884] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:41:58.018730 2026] [security2:error] [pid 17395:tid 17395] [client 162.158.94.124:9884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.crazypencil.com"] [uri "/.git/refs/heads/master"] [unique_id "ab33Zlckp0xIWylrZEc8VgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 08:47:48
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:47:36.761033 2026] [security2:error] [pid 20266:tid 20266] [client 162.158.94.124:12301] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:47:36.761033 2026] [security2:error] [pid 20266:tid 20266] [client 162.158.94.124:12301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.rockwaychiropractic.com"] [uri "/.git/refs/heads/main"] [unique_id "ab0JqEmADGRRXng0LYaxQQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-03-20 04:58:37
UTC ·
(7 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 03:27:11
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:27:01.193285 2026] [security2:error] [pid 29197:tid 29197] [client 162.158.94.124:13366] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.94.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:27:01.193285 2026] [security2:error] [pid 29197:tid 29197] [client 162.158.94.124:13366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crescentawards.armadillosigns.com"] [uri "/.env.php"] [unique_id "aby-hb0ZA62RoQ76BarH-AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
