🇺🇸
TPI-Abuse
2026-09-26 13:25:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 09:25:15.312947 2026] [security2:error] [pid 12861:tid 12861] [client 162.158.158.212:10382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebeeplace.com"] [uri "/wp-config.php"] [unique_id "arfHu8UIn3dYVHs3G_xzcQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-09 09:00:32
(2 weeks ago)
Web App Attack
🇯🇵
S.O.B.A. Dev.
2026-08-30 00:27:35
(4 weeks ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇧🇪
madeit
2026-08-21 15:54:43
(1 month ago)
Web App Attack
🇺🇸
octageeks.com
2026-04-07 04:06:35
(5 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 02:46:04
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 22:45:56.953703 2026] [security2:error] [pid 27393:tid 27393] [client 162.158.158.212:9810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thehiddengemmalta.com"] [uri "/.env.docker"] [unique_id "ab4GZCNOu1l97DTI9vsExAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 05:52:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 01:52:15.557451 2026] [security2:error] [pid 14039:tid 14039] [client 162.158.158.212:11529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.californiastarsfarm.com.herston.net"] [uri "/.env.production"] [unique_id "abzgj_vsniCLIg0i5z7DawAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 05:36:05
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 01:36:00.972310 2026] [security2:error] [pid 6588:tid 6588] [client 162.158.158.212:13448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nwarchitect.com"] [uri "/.env1"] [unique_id "abzcwIzbNE379U4GzE5n8gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 04:54:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 00:54:38.309140 2026] [security2:error] [pid 16468:tid 16468] [client 162.158.158.212:12270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thegreenhome.xyz.artbytracyjane.com"] [uri "/.git/refs/heads/master"] [unique_id "abzTDm6WBcEb5RTYkjML2wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 03:55:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:55:11.512805 2026] [security2:error] [pid 1350:tid 1382] [client 162.158.158.212:10842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.mailme.name"] [uri "/.env.prod"] [unique_id "abzFHwUV_ySGB_6v3bucLQAAARc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 02:21:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:21:25.167177 2026] [security2:error] [pid 29887:tid 29887] [client 162.158.158.212:10166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.2massociatesllc.com"] [uri "/app/.env"] [unique_id "abyvJcUGCNrpKfxUyQ-aqAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 02:03:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:03:33.747182 2026] [security2:error] [pid 31158:tid 31158] [client 162.158.158.212:13205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realtorpaul.com"] [uri "/srv/.env"] [unique_id "abyq9edYOlCTSml1GI8gzwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:09:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:09:03.260845 2026] [security2:error] [pid 24594:tid 24594] [client 162.158.158.212:10942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.yourpath.help"] [uri "/.env.bak"] [unique_id "abyQH4MnyjjBcigbm_p3JgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:30:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:30:32.370146 2026] [security2:error] [pid 7981:tid 7981] [client 162.158.158.212:11100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.peakagronomysolutions.com"] [uri "/site/.env"] [unique_id "abveWF7PujDWmeCKR8DDFAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:17:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:17:16.687702 2026] [security2:error] [pid 29788:tid 29788] [client 162.158.158.212:12855] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rayeliotschwartz.zenmonkeyproject.com"] [uri "/.env.backup"] [unique_id "abvNLByjaKhOinidlAo8LwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
