🇺🇸
TPI-Abuse
2026-11-10 11:01:50
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:01:42.073018 2026] [security2:error] [pid 499:tid 499] [client 162.158.95.66:9780] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:01:42.073018 2026] [security2:error] [pid 499:tid 499] [client 162.158.95.66:9780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roselowry.com"] [uri "/wp-config.php.save"] [unique_id "avL5lhy9M1g3-1ncLL1OLQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-11-06 15:34:50
UTC ·
(4 days ago)
Web App Attack
🇳🇴
jad-abuse
2026-07-24 01:11:00
UTC ·
(3 months ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_admin. Observed by 1 sensor(s); 2 hits.
Brute-Force
Web App Attack
2026-07-20 13:40:46
UTC ·
(3 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 06:48:11
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 02:48:03.768291 2026] [security2:error] [pid 8940:tid 8940] [client 162.158.95.66:0] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 02:48:03.768291 2026] [security2:error] [pid 8940:tid 8940] [client 162.158.95.66:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.webuildbeaches.com"] [uri "/.git/config"] [unique_id "akdbI5jdHUnYWZq5kIgytwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-06-21 20:26:28
UTC ·
(4 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
mnsf
2026-06-16 02:05:08
UTC ·
(4 months ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 20:00:59
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 16:00:54.493961 2026] [security2:error] [pid 27306:tid 27310] [client 162.158.95.66:13041] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 16:00:54.493961 2026] [security2:error] [pid 27306:tid 27310] [client 162.158.95.66:13041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "holoshot.geoception.com"] [uri "/.git/config"] [unique_id "aicfdlJoCgDxtd459dv6tQAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-05-23 05:18:06
UTC ·
(5 months ago)
Bad Web Bot
🇺🇸
WellSpring
2026-04-30 17:21:18
UTC ·
(6 months ago)
wordpress scan on palletdrop.org/wp-admin/install.php — WellSpr.ing/NetSentinel civic-AI security layer
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 15:26:09
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 11:26:03.165778 2026] [security2:error] [pid 13370:tid 13370] [client 162.158.95.66:13087] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 11:26:03.165778 2026] [security2:error] [pid 13370:tid 13370] [client 162.158.95.66:13087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.patanthony.com"] [uri "/.git/config"] [unique_id "afN0iwZrjahLun857CdZzwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Lino Project
2026-04-10 09:21:22
UTC ·
(7 months ago)
162.158.95.66 - - [10/Apr/2026:11:21:21 +0200] "GET /.env.local HTTP/2.0" 404 275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.4.18"
...
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-04-08 16:05:32
UTC ·
(7 months ago)
Scanning/Probing (55)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 04:04:26
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 00:04:18.787268 2026] [security2:error] [pid 639909:tid 639909] [client 162.158.95.66:10100] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 00:04:18.787268 2026] [security2:error] [pid 639909:tid 639909] [client 162.158.95.66:10100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.luxandunion.com"] [uri "/.env.dev"] [unique_id "adSCQhfM3rQjiwDq8m8HrQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 01:15:33
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 21:15:26.403645 2026] [security2:error] [pid 886920:tid 886939] [client 162.158.95.66:13118] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 21:15:26.403645 2026] [security2:error] [pid 886920:tid 886939] [client 162.158.95.66:13118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.aassone.com"] [uri "/.git/config"] [unique_id "adRarlaXKDffXWOWWgS50gAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
