🇺🇸
TPI-Abuse
2026-07-16 21:16:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 17:16:19.660782 2026] [security2:error] [pid 14051:tid 14051] [client 162.158.154.160:11197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotdamnsam.onlyincanada-eh.com"] [uri "/.env.old"] [unique_id "allKI5wgLRCIVgZy2nxwwgAAAGg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-08 20:06:00
(2 weeks ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇳🇱
COMPLEX
2026-05-29 00:37:59
(1 month ago)
Unsolicited TCP traffic | Action: DROP | Port 443
Phishing
🇺🇸
octageeks.com
2026-03-20 04:11:02
(4 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:30:43
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:30:33.402131 2026] [security2:error] [pid 28246:tid 28246] [client 162.158.154.160:11860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pagewideprinting.computersraleigh.com"] [uri "/.env.local"] [unique_id "abyVKUgUsX9yYGP17GQ3oAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:23:27
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:23:22.006975 2026] [security2:error] [pid 14789:tid 14789] [client 162.158.154.160:12073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.walkercline.com"] [uri "/backend/.env"] [unique_id "abvcquJ8qUjppMwB2Mv5hAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:42:18
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:42:08.020346 2026] [security2:error] [pid 2652:tid 2652] [client 162.158.154.160:13553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.misogynyis.com"] [uri "/.env.production.bak"] [unique_id "abvTAIEOTtbd-fsPdS6S5gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:21:32
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:21:28.204926 2026] [security2:error] [pid 8490:tid 8490] [client 162.158.154.160:13153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.wsdtc.net"] [uri "/.env.development.local"] [unique_id "abvOKHrUBGatUgco_RqViwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 09:56:15
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:56:11.688193 2026] [security2:error] [pid 27729:tid 27729] [client 162.158.154.160:10275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.gandmaquatics.com"] [uri "/config/.env.local"] [unique_id "abvIOwjhmY17GbDFX0Q8eQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 09:28:07
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:27:59.232392 2026] [security2:error] [pid 12139:tid 12139] [client 162.158.154.160:14302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sveum.net"] [uri "/.env.production.local"] [unique_id "abvBn40lMbQWQ5bw7jnpYwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:51:35
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:51:29.470860 2026] [security2:error] [pid 14233:tid 14233] [client 162.158.154.160:10735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.adults-biz.com"] [uri "/.env.php"] [unique_id "abu5EbdWfXaAheI7lcSXGQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:23:16
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:23:10.338411 2026] [security2:error] [pid 23918:tid 23932] [client 162.158.154.160:11310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.aussiepens.com"] [uri "/docker/.env"] [unique_id "abuybsRIWLBEyGdf8FGyBwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:03:33
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:03:25.548381 2026] [security2:error] [pid 12804:tid 12804] [client 162.158.154.160:9846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.schoolsliaisoncommunity.net"] [uri "/.env.production"] [unique_id "abutzXy5uLcv_qPKpUD5tQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 06:17:37
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 02:17:33.739657 2026] [security2:error] [pid 18439:tid 18439] [client 162.158.154.160:10163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.farsipraiseclub.com"] [uri "/.env.example"] [unique_id "abuU_Wy1umNxROdD8iSwEQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 05:55:47
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 01:55:25.771877 2026] [security2:error] [pid 24560:tid 24560] [client 162.158.154.160:10891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.philipjnielsen-drafting-design.com"] [uri "/.env~"] [unique_id "abuPzWzXJy-fg0hYSCPk-QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack