🇩🇪
abdubhai
2026-09-10 04:25:43
(40 minutes ago)
162.158.155.50 - - [10/Sep/2026:
...
Brute-Force
🇺🇸
TPI-Abuse
2026-08-26 23:59:21
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 19:59:13.634740 2026] [security2:error] [pid 19043:tid 19043] [client 162.158.155.50:12361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.gardnercastle.com"] [uri "/.git/HEAD"] [unique_id "ao990Y56uQcBUf0KVyWR2gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
S.O.B.A. Dev.
2026-07-09 18:50:38
(2 months ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇺🇸
TPI-Abuse
2026-03-21 04:44:35
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 00:44:30.979023 2026] [security2:error] [pid 8754:tid 8754] [client 162.158.155.50:10637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.hydrogenplus.net"] [uri "/.env.production"] [unique_id "ab4iLimKDgQzBw9aoxieJQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 01:13:26
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:13:20.560918 2026] [security2:error] [pid 26288:tid 26288] [client 162.158.155.50:10369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.medusakenya.com"] [uri "/.env.tmp"] [unique_id "ab3wsDCZAzK3FxnzfASQAAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 05:15:38
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 01:15:32.368725 2026] [security2:error] [pid 11467:tid 11467] [client 162.158.155.50:12345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.markrikey.com"] [uri "/.env2"] [unique_id "abzX9DTPtcpImzuHXb8ltAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 01:56:49
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 21:56:43.681747 2026] [security2:error] [pid 3245:tid 3245] [client 162.158.155.50:10960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "margroberts.com"] [uri "/admin/.env"] [unique_id "abypW8US94ms5j--hlpQQAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:21:17
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:21:14.152833 2026] [security2:error] [pid 4200:tid 4200] [client 162.158.155.50:12262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.odysseydogasporlari.com"] [uri "/.env.dev.local"] [unique_id "abyS-knuGYWtu9MeyNmpAwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:20:42
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:20:32.980307 2026] [security2:error] [pid 17329:tid 17329] [client 162.158.155.50:12962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jerryhazlett.com"] [uri "/private/.env"] [unique_id "abvcANOta440aT9pE0-VhwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:56:09
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:56:03.779082 2026] [security2:error] [pid 4582:tid 4582] [client 162.158.155.50:13073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "groundcontrolmarketing.georgetownca.com"] [uri "/.env.json"] [unique_id "abu6I874g10cjDuT7TuFAQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:26:32
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:26:20.503061 2026] [security2:error] [pid 4376:tid 4376] [client 162.158.155.50:11373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.maycockfamily.com"] [uri "/.env_config"] [unique_id "abuzLHyMIwy-CA3VQX6NGgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 07:33:53
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 03:33:46.719832 2026] [security2:error] [pid 18667:tid 18667] [client 162.158.155.50:10672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.mairslair.com"] [uri "/.env.development.local"] [unique_id "abum2oHzzNbuagVUuJhrqAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 06:45:14
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 02:45:08.598649 2026] [security2:error] [pid 4796:tid 4796] [client 162.158.155.50:10803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.johnatuttle.us"] [uri "/core/.env"] [unique_id "abubdBdpFnVqhP7YPaAXcAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 06:28:42
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 02:28:37.218601 2026] [security2:error] [pid 24860:tid 24913] [client 162.158.155.50:11081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.moderncabinetcorp.com"] [uri "/.env.development"] [unique_id "abuXlTC7iCQmo9lXKqhTVAAAAoY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 05:53:39
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.155.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 01:53:29.807339 2026] [security2:error] [pid 1682:tid 1682] [client 162.158.155.50:10519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.fynebutts.com"] [uri "/.env.development.local"] [unique_id "abuPWYRUJlZfS-8xcLS1mwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
