🇧🇪
madeit
2026-08-26 13:13:49
(5 hours ago)
Web App Attack
🇺🇸
mawan
2026-06-19 02:38:02
(2 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
octageeks.com
2026-04-10 04:09:09
(4 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
octageeks.com
2026-04-04 04:45:27
(4 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 03:54:52
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 23:54:43.603169 2026] [security2:error] [pid 12569:tid 12569] [client 162.158.154.151:10769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.geceindia.com"] [uri "/.env.backup"] [unique_id "ab4Wg0Pr2QQ8btQzxus-SAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 07:13:27
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:13:17.097285 2026] [security2:error] [pid 9610:tid 9610] [client 162.158.154.151:13249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jhbookdesign.com"] [uri "/.env_backup"] [unique_id "abzzjZITNgMPm3thcm_G3AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 05:43:25
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 01:43:19.219318 2026] [security2:error] [pid 11502:tid 11502] [client 162.158.154.151:10702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.knowledgepreservationalliance.com"] [uri "/.env.development"] [unique_id "abzedyGJZ15kzONbd9wuYgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 04:58:56
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 00:58:52.420674 2026] [security2:error] [pid 18812:tid 18812] [client 162.158.154.151:9421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.eliteelectricalservices.us"] [uri "/.env.production.bak"] [unique_id "abzUDNp9cvHFvzcyaqyeLgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 04:11:42
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 00:11:35.735850 2026] [security2:error] [pid 867:tid 867] [client 162.158.154.151:9742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mdp-interiors.com"] [uri "/.env.prod"] [unique_id "abzI99bAZluXxRSlgrhBkQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 03:06:07
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:06:00.855493 2026] [security2:error] [pid 8839:tid 8839] [client 162.158.154.151:13132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "redbends.com"] [uri "/.env1"] [unique_id "aby5mLpZUEZ7Bxefy65kJQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 01:59:10
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 21:59:01.229518 2026] [security2:error] [pid 31338:tid 31342] [client 162.158.154.151:11045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.afxindustries.com"] [uri "/.env.backup"] [unique_id "abyp5U2r5hgySPE0Vq9TvQAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:47:44
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:47:38.035796 2026] [security2:error] [pid 16334:tid 16334] [client 162.158.154.151:12432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.futureproductionsonline.com"] [uri "/config/.env"] [unique_id "abviWiaCPAgueSAZqtBJMwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:10:38
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:10:30.122997 2026] [security2:error] [pid 19137:tid 19137] [client 162.158.154.151:12255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.codeem.tremulant.com"] [uri "/.env.dist"] [unique_id "abvZprAbTCW0gphv-DDUSAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:28:14
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:28:07.953765 2026] [security2:error] [pid 2772:tid 2772] [client 162.158.154.151:10366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.hcadwin.com"] [uri "/private/.env"] [unique_id "abvPtxh1IDh3pqxMrrY_8gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:10:19
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:10:15.617294 2026] [security2:error] [pid 22694:tid 22694] [client 162.158.154.151:11639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.catnameslist.com"] [uri "/backend/.env"] [unique_id "abvLhzr6IEhH_nuLylCdMgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack