🇧🇪
madeit
2026-08-21 15:14:33
(1 day ago)
Web App Attack
🇮🇩
securejdprop
2026-08-21 10:21:49
(2 days ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇩🇪
acadeova
2026-07-29 18:34:40
(3 weeks ago)
🚨 Recon detected (nft drop)
SRC=162.158.154.68
Observed=TCP dpt=80 in=enp0s6 ttl=59
Time=recent(jour ...
show more
🚨 Recon detected (nft drop)
SRC=162.158.154.68
Observed=TCP dpt=80 in=enp0s6 ttl=59
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-19 13:25:37
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 09:25:32.193616 2026] [security2:error] [pid 25313:tid 25313] [client 162.158.154.68:9416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jazziientertainment.com"] [uri "/.env.production"] [unique_id "ajVDTMY_BYf42kX9wHJewAAAABs"], referer: https://www.google.com/search?q=jazziientertainment.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 08:12:11
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:12:03.654620 2026] [security2:error] [pid 25565:tid 25565] [client 162.158.154.68:11305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotpay.co"] [uri "/.env.staging"] [unique_id "ab0BU5svZgNYrIuZYaEVzwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 06:04:46
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:04:40.226013 2026] [security2:error] [pid 4328:tid 4328] [client 162.158.154.68:11732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kingmansvc.com"] [uri "/.env.old"] [unique_id "abzjeO0BhUONxMSmxdHhLAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 03:31:30
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:31:22.493664 2026] [security2:error] [pid 16627:tid 16627] [client 162.158.154.68:11167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aurumcraft.com.38floorsupply.com"] [uri "/.env.dev"] [unique_id "aby_isGbnSIKkmdNspffbgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:02:52
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:02:47.817262 2026] [security2:error] [pid 8281:tid 8281] [client 162.158.154.68:9307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calgaryhottubsale.wholesalelivelobsters.com"] [uri "/.env.tmp"] [unique_id "abyOp4ypSmfXlffrk1_jywAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-03-19 13:08:42
(5 months ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:08:22
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:08:11.264077 2026] [security2:error] [pid 16686:tid 16686] [client 162.158.154.68:14213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mqyr.com"] [uri "/.env.save"] [unique_id "abvZG0kLbG1FuYVh_fDa2AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:48:20
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:48:14.696365 2026] [security2:error] [pid 28173:tid 28173] [client 162.158.154.68:10484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.chavarri.com"] [uri "/.env.php"] [unique_id "abvUbkZjRRYkte8SG7V5bwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:11:20
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:11:13.058613 2026] [security2:error] [pid 30677:tid 30677] [client 162.158.154.68:12542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.catnameslist.com"] [uri "/.env.production.bak"] [unique_id "abvLwWVjkS_fbCVnAwWhRwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 09:03:51
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:03:44.380038 2026] [security2:error] [pid 30003:tid 30003] [client 162.158.154.68:10941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.nwsci.net"] [uri "/.env.backup"] [unique_id "abu78D6lB4jVQaafODsy1AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:42:51
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:42:40.543437 2026] [security2:error] [pid 6078:tid 6078] [client 162.158.154.68:10574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.amazingstructural.amazingwelding.com"] [uri "/api/.env"] [unique_id "abu3APixVnpyom31LHq_ZgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 07:04:04
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.154.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 03:03:54.009693 2026] [security2:error] [pid 15599:tid 15599] [client 162.158.154.68:10632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jillbauman.com"] [uri "/site/.env"] [unique_id "abuf2gVEtf3A15ZH8o5RjQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack