🇧🇪
madeit
2026-10-19 21:14:07
(4 days ago)
Web App Attack
🇺🇸
almazick
2026-10-18 14:19:15
(6 days ago)
Fail2Ban jail window on srv1.windowrepair.us banned 162.158.158.104 after 1 attempts
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-06 20:48:42
(2 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 11:40:19
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 07:40:15.536365 2026] [security2:error] [pid 30941:tid 30941] [client 162.158.158.104:13283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mathiasaspelin.com"] [uri "/wp-config.php.bak"] [unique_id "arevH0hmiMGg38EyVGv2ewAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-24 21:19:59
(4 weeks ago)
Web App Attack
🇧🇪
madeit
2026-09-17 07:34:50
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-09-07 20:58:18
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-08-19 06:44:26
(2 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 00:11:10
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 20:11:04.473920 2026] [security2:error] [pid 25378:tid 25378] [client 162.158.158.104:24604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ourhotmail.com"] [uri "/.git/HEAD"] [unique_id "ajHmGBHurfdk4CH6TAUvwgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 04:33:33
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 00:33:27.999850 2026] [security2:error] [pid 5110:tid 5110] [client 162.158.158.104:13289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.virtuallyinfinitesystems.com"] [uri "/.env.bak"] [unique_id "ab4fl-WtkIhEOEUiMQzycAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 06:29:59
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:29:53.587602 2026] [security2:error] [pid 852:tid 852] [client 162.158.158.104:13916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ontrek.com"] [uri "/private/.env"] [unique_id "abzpYavwia3dpSHSvqF4cAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 04:17:24
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 00:17:15.262205 2026] [security2:error] [pid 31890:tid 31890] [client 162.158.158.104:14030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.susanleeward.com"] [uri "/.env.staging"] [unique_id "abzKS5P2R7yll3Pa0Bm5YAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 03:09:54
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:09:47.432581 2026] [security2:error] [pid 26562:tid 26562] [client 162.158.158.104:9803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.bonvivantorganics.com"] [uri "/.env.dev.local"] [unique_id "aby6e4y5dOcrz1sxhYd79gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 02:36:32
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:36:24.941547 2026] [security2:error] [pid 13725:tid 13725] [client 162.158.158.104:10994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rogerproperties.com"] [uri "/private/.env"] [unique_id "abyyqEbR52ZULxco3ica-AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:34:41
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:34:31.342805 2026] [security2:error] [pid 28321:tid 28321] [client 162.158.158.104:12741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.comsew.com.au"] [uri "/.env.orig"] [unique_id "abvRN5nr0VAbkE22-Xa_ggAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
