🇺🇸
TPI-Abuse
2026-10-19 22:20:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 18:20:05.711374 2026] [security2:error] [pid 8662:tid 8729] [client 163.43.87.178:54556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "landmarkocchealth.com"] [uri "/.env"] [unique_id "ataXlfuldXHsvEwQSFt2MwAAAQA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-19 21:59:31
(1 day ago)
Auto-ban: >3000 req/min op 2026-10-19
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-10-19 08:13:24
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 04:13:19.181354 2026] [security2:error] [pid 27818:tid 27818] [client 163.43.87.178:63963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lordhari.com"] [uri "/.env"] [unique_id "atXRH6vGSPj-yVWnPRj6_gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 04:13:39
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 00:13:34.525491 2026] [security2:error] [pid 26181:tid 26181] [client 163.43.87.178:52804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roguetechscene.com"] [uri "/.env"] [unique_id "atWY7lY7Kwb5pTKSIgru5gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 13:55:09
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the ...
show more
(mod_security) mod_security (id:210730) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:55:03.631139 2026] [security2:error] [pid 11374:tid 11374] [client 163.43.87.178:63262] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||new-bethel-baptist-church.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "new-bethel-baptist-church.com"] [uri "/home/tancedi1/new-bethel-baptist-church.com"] [unique_id "atIstwd_OxMjWv9qIvZ-nAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Lee Daniel
2026-09-25 07:53:16
(3 weeks ago)
163.43.87.178 - - [25/Sep/2026:03:53:15 -0400] "GET /.env HTTP/1.1" 403 6275 "-" "-"
...
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 22:54:33
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 18:54:28.132105 2026] [security2:error] [pid 24672:tid 24672] [client 163.43.87.178:49920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cerrovictoria.com"] [uri "/patagonia4.com.ar/p4_es/home/home.html/wp-config.php.bak"] [unique_id "arMHJDDL84nvtHHnMPRPmQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:18:41
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:18:36.428244 2026] [security2:error] [pid 5617:tid 5617] [client 163.43.87.178:57280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garrettkirkland.com"] [uri "/wp-config.php.bak"] [unique_id "arLinGTuI_We5sB6E-rqAgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:41:23
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 163.43.87.178 (www3938.sakura.ne.jp): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:41:16.640752 2026] [security2:error] [pid 10159:tid 10159] [client 163.43.87.178:56071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ardecymusic.com"] [uri "/wp-config.php.bak"] [unique_id "arKTjBuI8rnpzkYRcoxE6QAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-22 05:01:11
(4 weeks ago)
[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 163.43.87.178 - - [22/Sep/2026:07:01:02 +0200] "GET /.env HTTP/1.1" 500 482 "-" "-"
...
show less
Bad Web Bot
Web App Attack
