🇺🇸
TPI-Abuse
2026-09-12 14:00:33
(20 minutes ago)
(mod_security) mod_security (id:210492) triggered by 162.35.112.151 (vps3581972.trouble-free.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.35.112.151 (vps3581972.trouble-free.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 10:00:27.762522 2026] [security2:error] [pid 2266:tid 2266] [client 162.35.112.151:33000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fusionrep.com"] [uri "/wp-config.php.bak"] [unique_id "aqVa-3I_th4DTG1nVyA2hwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-12 13:37:06
(43 minutes ago)
Automated web vulnerability scanning and reconnaissance
Bad Web Bot
Web App Attack
🇩🇪
pigro
2026-09-12 12:59:50
(1 hour ago)
162.35.112.151 - - [12/Sep/2026:14:59:49 +0200] "GET /api/session/properties HTTP/1.1" 404 125 "-" " ...
show more
162.35.112.151 - - [12/Sep/2026:14:59:49 +0200] "GET /api/session/properties HTTP/1.1" 404 125 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)"
162.35.112.151 - - [12/Sep/2026:14:59:49 +0200] "GET /api/session/properties HTTP/1.1" 301 5 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 12:43:21
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 162.35.112.151 (vps3581972.trouble-free.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.35.112.151 (vps3581972.trouble-free.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 08:43:16.323878 2026] [security2:error] [pid 3080:tid 3080] [client 162.35.112.151:60220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pcga.golf"] [uri "/wp-config.php.save"] [unique_id "aqVI5NaqpmI3FVAIDb7MQwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-12 12:16:00
(2 hours ago)
3000
Brute-Force
Port Scan
Hacking
🇩🇪
klaus_ph
2026-09-12 11:20:54
(2 hours ago)
[Sat Sep 12 13:20:46.031509 2026] [php:error] [pid 202365] [client 162.35.112.151:35470] script '/va ...
show more
[Sat Sep 12 13:20:46.031509 2026] [php:error] [pid 202365] [client 162.35.112.151:35470] script '/var/www/html/index.php' not found or unable to stat
...
show less
Brute-Force
🇺🇸
kosada.com
2026-09-12 11:07:57
(3 hours ago)
Repeated requests for suspicious nonexistent URLs, for example: /wp-json/gravitysmtp/v1/tests/mock-d ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /wp-json/gravitysmtp/v1/tests/mock-data (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36")
show less
Web App Attack
🇺🇸
mnsf
2026-09-12 11:05:14
(3 hours ago)
Abuse Detected (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 10:52:11
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.35.112.151 (vps3581972.trouble-free.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.35.112.151 (vps3581972.trouble-free.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 06:52:04.401401 2026] [security2:error] [pid 12557:tid 12557] [client 162.35.112.151:43590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kobraagencies.com"] [uri "/wp-config.php~"] [unique_id "aqUu1EAO3kv0Ra-bdg2QogAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 10:36:44
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.35.112.151 (vps3581972.trouble-free.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.35.112.151 (vps3581972.trouble-free.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 06:36:38.766875 2026] [security2:error] [pid 3230780:tid 3230832] [client 162.35.112.151:37830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.visionforandfromchildren.org"] [uri "/wp-config.php.save"] [unique_id "aqUrNgP7n45hLl7yoQ00BwAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-12 10:13:59
(4 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
yitzhaq
2026-09-12 09:45:25
(4 hours ago)
162.35.112.151 - - [12/Sep/2026:11:45:13 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4483 "-" ...
show more
162.35.112.151 - - [12/Sep/2026:11:45:13 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
162.35.112.151 - - [12/Sep/2026:11:45:21 +0200] "POST /index.php/wp-json/batch/v1 HTTP/1.1" 403 4483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
show less
Web App Attack
Hacking
2026-09-12 09:28:24
(4 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 09:11:15
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.35.112.151 (vps3581972.trouble-free.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.35.112.151 (vps3581972.trouble-free.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 05:11:11.113200 2026] [security2:error] [pid 26522:tid 26522] [client 162.35.112.151:48082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gerrytolentino.praemiumtech.com"] [uri "/wp-config.php.save"] [unique_id "aqUXL0JPH3smb2ADXgemlwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 08:34:17
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.35.112.151 (vps3581972.trouble-free.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.35.112.151 (vps3581972.trouble-free.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 04:34:10.056730 2026] [security2:error] [pid 8870:tid 8870] [client 162.35.112.151:49152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.shhcenter.com"] [uri "/wp-config.php~"] [unique_id "aqUOgq_2WsgvP65Jhv85gwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
