🇧🇪
madeit
2026-09-07 20:15:24
(3 hours ago)
Web App Attack
🇧🇪
madeit
2026-08-26 21:56:42
(1 week ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 06:44:18
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 02:44:09.146968 2026] [security2:error] [pid 28007:tid 28007] [client 162.158.152.187:12713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.beckersystems.net"] [uri "/.git/HEAD"] [unique_id "aoKtuTUPN5-w1hMu9ixg3wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 02:16:45
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 22:16:38.709358 2026] [security2:error] [pid 16262:tid 16262] [client 162.158.152.187:9546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.muslera.com"] [uri "/.git/config"] [unique_id "aoEdhjCn-d_1A_OQMaehBQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-06-18 08:55:57
(2 months ago)
162.158.152.187 - - [18/Jun/2026:10:55:56 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5. ...
show more
162.158.152.187 - - [18/Jun/2026:10:55:56 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; [email protected] )" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 21:27:26
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 17:27:23.016502 2026] [security2:error] [pid 23580:tid 23580] [client 162.158.152.187:10617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.arellasoc.com"] [uri "/.env.dev"] [unique_id "ac2Nu1LzIEcXWf41ke4pPAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 06:21:41
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 02:21:33.931026 2026] [security2:error] [pid 8300:tid 8300] [client 162.158.152.187:14030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.valueproducersalliance.org"] [uri "/.env.test"] [unique_id "acy5bWCZ0m8urNR36CyhkgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 02:13:08
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 22:13:00.182464 2026] [security2:error] [pid 32411:tid 32411] [client 162.158.152.187:9830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lockyers.com"] [uri "/.env.test"] [unique_id "acx_LO0UBIJ61aZL2SI1SAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 16:13:39
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 12:13:34.213188 2026] [security2:error] [pid 4998:tid 4998] [client 162.158.152.187:12063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "foros2cn.vientodelevante.es"] [uri "/.env.dev"] [unique_id "acvyrjftXxavNGGYk4g__QAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 14:01:08
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 10:00:59.772823 2026] [security2:error] [pid 9683:tid 9683] [client 162.158.152.187:12957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kateshendge.com.sigi.biz"] [uri "/.env.backup"] [unique_id "acvTm6h6cQIqFyhHPTvQEAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 13:32:50
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 09:32:40.830873 2026] [security2:error] [pid 17437:tid 17454] [client 162.158.152.187:9292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lilapalooza.opticaldesignconcepts.com"] [uri "/.env.production.local"] [unique_id "acvM-Kz1CyvgzdFLt7K_QQAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 11:08:31
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 07:08:18.718092 2026] [security2:error] [pid 6089:tid 6089] [client 162.158.152.187:11152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "createbelieve.mroxygen.org"] [uri "/.env.bak"] [unique_id "acurIkOLZjj-BPT5OYAbQwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 10:25:09
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 06:24:58.962254 2026] [security2:error] [pid 15361:tid 15361] [client 162.158.152.187:12619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gallodestinationservices.com"] [uri "/.env_backup"] [unique_id "acug-g6zboxDcoZ_vn8ZLAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 10:06:01
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 06:05:56.770554 2026] [security2:error] [pid 10168:tid 10168] [client 162.158.152.187:10934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.eagrant.com"] [uri "/.env.old"] [unique_id "acuchA2OM3aeDCAUfqUiJAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 09:43:56
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.152.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 05:43:48.258696 2026] [security2:error] [pid 19189:tid 19189] [client 162.158.152.187:9889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.infolinkqr.com"] [uri "/.env.production"] [unique_id "acuXVN1dVpNAL80_Kl3NgQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
