🇺🇸
TPI-Abuse
2026-11-09 08:52:01
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:51:53.999536 2026] [security2:error] [pid 6191:tid 6191] [client 162.159.119.41:10183] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:51:53.999536 2026] [security2:error] [pid 6191:tid 6191] [client 162.159.119.41:10183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.capitalinvestingguides.com"] [uri "/.git/HEAD"] [unique_id "avGJqcToxp2RYlTz9Y40GQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-23 14:57:14
UTC ·
(2 weeks ago)
Web App Attack
🇫🇷
dynamix
2026-10-09 17:15:06
UTC ·
(1 month ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 13:56:15
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 09:56:07.793059 2026] [security2:error] [pid 19723:tid 19723] [client 162.159.119.41:14264] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 09:56:07.793059 2026] [security2:error] [pid 19723:tid 19723] [client 162.159.119.41:14264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tobyjohnson.com"] [uri "/.env.local"] [unique_id "aseg9wv_cBgRkFWXjAqdygAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 01:05:15
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 162.159.119.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 21:05:09.201354 2026] [security2:error] [pid 10314:tid 10314] [client 162.159.119.41:11677] ...
show more
(mod_security) mod_security (id:210730) triggered by 162.159.119.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 21:05:09.201354 2026] [security2:error] [pid 10314:tid 10314] [client 162.159.119.41:11677] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||portraitgalleria.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "portraitgalleria.com"] [uri "/index.php.bak"] [unique_id "asbsRRmRekjY8qDY1jqmNAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 08:54:07
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 04:53:58.546714 2026] [security2:error] [pid 14660:tid 14660] [client 162.159.119.41:12728] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 04:53:58.546714 2026] [security2:error] [pid 14660:tid 14660] [client 162.159.119.41:12728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rodzillacharters.com"] [uri "/.env.save"] [unique_id "asYIpq9pSzbvDekNRmcivwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-25 16:21:59
UTC ·
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-09-08 13:32:26
UTC ·
(2 months ago)
Web App Attack
🇧🇪
madeit
2026-08-25 00:25:55
UTC ·
(2 months ago)
Web App Attack
🇧🇪
madeit
2026-08-13 19:05:27
UTC ·
(2 months ago)
Web App Attack
🇧🇪
madeit
2026-08-06 04:21:34
UTC ·
(3 months ago)
Web App Attack
🇺🇸
wimaxnz
2026-06-03 00:00:40
UTC ·
(5 months ago)
Automated report from 247 Guardian: repeated malicious activity detected. | reason=nginx_badpath
Brute-Force
SSH
Port Scan
🇺🇸
octageeks.com
2026-04-04 04:44:36
UTC ·
(7 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 09:06:39
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 05:06:33.252108 2026] [security2:error] [pid 28440:tid 28440] [client 162.159.119.41:10815] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 05:06:33.252108 2026] [security2:error] [pid 28440:tid 28440] [client 162.159.119.41:10815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.purplebikinis.com"] [uri "/.env.container"] [unique_id "aco9GWZnzu24XI5b8uCJtgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-03-25 15:05:55
UTC ·
(7 months ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
