🇺🇸
TPI-Abuse
2026-10-16 02:01:10
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 22:01:04.631251 2026] [security2:error] [pid 31981:tid 31981] [client 162.158.122.121:11940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lemontreefoods.com"] [uri "/.env"] [unique_id "atGFYI2NJBpy3M6_C_gRQAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-15 22:00:23
(13 hours ago)
Auto-ban: >3000 req/min op 2026-10-15
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-10-15 20:46:58
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 16:46:52.172370 2026] [security2:error] [pid 8463:tid 8463] [client 162.158.122.121:10149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gbcwoodbine.org"] [uri "/.env.bak"] [unique_id "atE7vMW5JUIT5gTlIZnMXwAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 17:22:24
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 13:22:14.376566 2026] [security2:error] [pid 3930:tid 3930] [client 162.158.122.121:14256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krislajeskiedesign.com"] [uri "/.env.backup"] [unique_id "atELxo1hDYOoi27CgpFaRQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 16:05:12
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 12:05:07.301819 2026] [security2:error] [pid 8367:tid 8367] [client 162.158.122.121:13638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ic1.biz"] [uri "/.env.bak"] [unique_id "atD5s5c3HqU24TFk7XujggAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-15 15:55:58
(19 hours ago)
162.158.122.121 arduino.ua [15/Oct/2026:18:55:57 +0300] "GET /.ssh/id_rsa HTTP/2.0" 403 548 "-" "Moz ...
show more
162.158.122.121 arduino.ua [15/Oct/2026:18:55:57 +0300] "GET /.ssh/id_rsa HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 0.000 326
...
show less
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:27:09
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:26:39.653094 2026] [security2:error] [pid 32468:tid 32468] [client 162.158.122.121:10853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koreagreenrecycling.com"] [uri "/.htaccess"] [unique_id "atDUj5zLbFxZrgICT3OnVAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:12:01
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:11:57.119545 2026] [security2:error] [pid 956:tid 956] [client 162.158.122.121:13964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinkycouple4u.com"] [uri "/.git/HEAD"] [unique_id "atDRHbdNhnkf5AcKzmDOSAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-15 12:40:18
(22 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 11:55:23
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 07:55:02.250178 2026] [security2:error] [pid 5153:tid 5153] [client 162.158.122.121:13901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scoutmountaindistrict.org"] [uri "/wp-config.php.save"] [unique_id "atC_Fo2sed_b-PJCBa8Y7AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-10-15 11:47:48
(23 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 10:59:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 06:59:34.116970 2026] [security2:error] [pid 16438:tid 16438] [client 162.158.122.121:9606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "srippy.com"] [uri "/.env"] [unique_id "atCyFq2P1qQf1WP4UB2qewAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 10:44:13
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 06:44:06.205141 2026] [security2:error] [pid 28850:tid 28850] [client 162.158.122.121:10147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.individualhealth.com"] [uri "/.env.dev"] [unique_id "atCuds6Rh7tb_8ANoTHedgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 09:51:37
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 05:51:30.093137 2026] [security2:error] [pid 10222:tid 10222] [client 162.158.122.121:13741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cruisevacationtickets.com"] [uri "/.env.old"] [unique_id "atCiIikSdrRl4P0iEhw5tgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 09:17:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 05:17:02.744159 2026] [security2:error] [pid 24408:tid 24408] [client 162.158.122.121:10496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gpaarch.com"] [uri "/.env"] [unique_id "atCaDgPcesHDbmbd4qfY0gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
