🇺🇸
TPI-Abuse
2026-10-15 23:24:09
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 19:23:53.871961 2026] [security2:error] [pid 8356:tid 8356] [client 162.158.122.175:10385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jewson.org"] [uri "/.env.dev"] [unique_id "atFgiWdzsHhWwYPI5PQAHwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 23:08:34
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 19:08:25.271701 2026] [security2:error] [pid 5055:tid 5115] [client 162.158.122.175:10098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ewoolsey.com"] [uri "/.env.dev"] [unique_id "atFc6R8m6Mjw78uJj-msUAAAAgM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 22:47:24
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 18:47:12.256262 2026] [security2:error] [pid 8325:tid 8325] [client 162.158.122.175:11446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qwixel.com"] [uri "/.env.backup"] [unique_id "atFX8ABvbc3rqwUJb1erjQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 18:39:23
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 14:39:02.182119 2026] [security2:error] [pid 25884:tid 25884] [client 162.158.122.175:11486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pakistanvision.com"] [uri "/wp-config.php.bak"] [unique_id "atEdxiv-vvVPUQLbZg5rCgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-15 17:47:25
(4 days ago)
[15/Oct/2026:20:47:23 +0300] -- 162.158.122.175 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.e ...
show more
[15/Oct/2026:20:47:23 +0300] -- 162.158.122.175 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.production HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 15:41:33
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 11:41:27.824868 2026] [security2:error] [pid 25544:tid 25544] [client 162.158.122.175:9298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wetlizarddiveteam.com"] [uri "/.env.old"] [unique_id "atD0JwB6diG9xE3D6vPdVgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 15:06:25
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 11:06:16.341099 2026] [security2:error] [pid 23043:tid 23102] [client 162.158.122.175:12701] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "the-aquifer.com"] [uri "/.env.staging"] [unique_id "atDr6L6n8NJLyjs_Y2FgLAAAAUI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
1337v411
2026-10-15 13:59:23
(4 days ago)
[2026-10-15T13:59:23+00:00] uri="/.git/config" ua="Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Ma ...
show more
[2026-10-15T13:59:23+00:00] uri="/.git/config" ua="Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:20:11
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:20:06.105549 2026] [security2:error] [pid 13228:tid 13228] [client 162.158.122.175:13983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeremymetzger.com"] [uri "/.env.backup"] [unique_id "atDTBvn_YbAmkWVRTdnvMgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 12:33:32
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:33:16.650237 2026] [security2:error] [pid 29308:tid 29308] [client 162.158.122.175:13084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drainpoultry.com"] [uri "/.git/config"] [unique_id "atDIDOSEI7FxI47qTONbmwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 10:50:35
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 06:50:09.949702 2026] [security2:error] [pid 31554:tid 31554] [client 162.158.122.175:13220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webersource.com"] [uri "/.svn/entries"] [unique_id "atCv4Y8V9zBH_zs7GvSXZAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 10:22:28
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 06:22:06.581242 2026] [security2:error] [pid 10523:tid 10559] [client 162.158.122.175:12098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "woodamy.com"] [uri "/.env.local"] [unique_id "atCpTou3fI_mNADXs_VppAAAAQM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
vtchost.com
2026-10-15 09:54:10
(5 days ago)
forbidden http request, scanning for weaknesses
...
Web App Attack
🇫🇷
dynamix
2026-10-15 08:51:57
(5 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 08:15:30
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.122.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:15:25.535082 2026] [security2:error] [pid 3093:tid 3093] [client 162.158.122.175:11635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hometechllc.com"] [uri "/.env"] [unique_id "atCLnVMb2HnXAg5khrxJdQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
