🇧🇪
madeit
2026-09-21 21:29:39
(15 hours ago)
Web App Attack
🇺🇸
chrisj
2026-09-15 22:22:57
(6 days ago)
[Tue Sep 15 22:22:54.568439 2026] [proxy_fcgi:error] [pid 9043:tid 9068] [remote 162.158.154.110:141 ...
show more
[Tue Sep 15 22:22:54.568439 2026] [proxy_fcgi:error] [pid 9043:tid 9068] [remote 162.158.154.110:14191] AH01071: Got error 'Primary script unknown'
[Tue Sep 15 22:22:55.127086 2026] [proxy_fcgi:error] [pid 9043:tid 9060] [remote 162.158.154.110:14191] AH01071: Got error 'Primary script unknown'
[Tue Sep 15 22:22:56.298507 2026] [proxy_fcgi:error] [pid 9043:tid 9056] [remote 162.158.154.110:14191] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇧🇪
madeit
2026-09-01 01:21:37
(3 weeks ago)
Web App Attack
🇳🇱
COMPLEX
2026-05-29 00:22:50
(3 months ago)
Unsolicited TCP traffic | Action: DROP | Port 443
Phishing
🇺🇸
TPI-Abuse
2026-03-20 07:04:01
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:03:56.875383 2026] [security2:error] [pid 10217:tid 10217] [client 162.158.154.110:9807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.termstech.com"] [uri "/.env.local.backup"] [unique_id "abzxXIf1qexGORp9-nAgywAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 03:07:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:06:54.611792 2026] [security2:error] [pid 31556:tid 31556] [client 162.158.154.110:12840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.anniesherbals.com"] [uri "/.env.example"] [unique_id "aby5zgSpeG49qTML2U3YXwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:32:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:32:17.263096 2026] [security2:error] [pid 20695:tid 20695] [client 162.158.154.110:10043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lilpiggiescardgame.com"] [uri "/.env.staging"] [unique_id "abvewYt9zFJqA5MYXgYadgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:11:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:11:19.931231 2026] [security2:error] [pid 18245:tid 18245] [client 162.158.154.110:9495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.wolfmachine.com"] [uri "/.env.development"] [unique_id "abvZ17whvqlRg2ujQ958rgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:38:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:38:50.171759 2026] [security2:error] [pid 9667:tid 9667] [client 162.158.154.110:13671] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.microbooty.com"] [uri "/.env.docker"] [unique_id "abvSOiL6cmkLBdIIS6QqVQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 09:49:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:49:17.149842 2026] [security2:error] [pid 9847:tid 9847] [client 162.158.154.110:9332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.intelerium.com"] [uri "/.env~"] [unique_id "abvGnceBv1wF6GKJ5uxPOwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 09:32:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:32:03.514021 2026] [security2:error] [pid 1278921:tid 1278921] [client 162.158.154.110:10801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mark-et-ing-1llc.com"] [uri "/.env.development"] [unique_id "abvCk8njDvxUG5xK4IRXjAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 09:09:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:09:35.164116 2026] [security2:error] [pid 22428:tid 22428] [client 162.158.154.110:9493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.brupharm.net"] [uri "/.env.php"] [unique_id "abu9T3HE7HaRNbbgNr686wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:39:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:39:36.974953 2026] [security2:error] [pid 25652:tid 25652] [client 162.158.154.110:13834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.antech.net"] [uri "/config/.env.local"] [unique_id "abu2SEzG9LdIRbmAxSTBpwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:13:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:13:09.318582 2026] [security2:error] [pid 7453:tid 7453] [client 162.158.154.110:11083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.fydelityco.com"] [uri "/docker/.env.local"] [unique_id "abuwFeyUlNlko9xVz6x-CwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 07:42:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 03:42:51.319268 2026] [security2:error] [pid 15864:tid 15864] [client 162.158.154.110:10619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.elgarage.com.mx"] [uri "/.env.container"] [unique_id "abuo-zU8t-jIVJC0kMGhwgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
