๐บ๐ธ
TPI-Abuse
2026-06-08 19:32:22
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 15:32:16.203863 2026] [security2:error] [pid 30106:tid 30106] [client 162.158.158.244:23418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4lazytrafficschool.4lazy.com"] [uri "/.git/config"] [unique_id "aicYwAX58fzOIYMmN9h8rgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-04-21 22:01:25
(1 month ago)
Auto-ban: >3000 req/min op 2026-04-21
Web App Attack
SSH
Hacking
๐ฉ๐ช
Sรฉfora Srl
2026-04-15 20:01:24
(1 month ago)
Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache ...
show more
Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache-badbot jail
show less
Bad Web Bot
๐ฆ๐บ
[email protected]
2026-04-09 07:02:07
(1 month ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /v1/messages
Web App Attack
๐บ๐ธ
walnuts
2026-04-05 16:10:10
(2 months ago)
Automated: Triggered nginx security jail (nginx-444) - probing blocked paths on web server
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 05:00:27
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 01:00:20.181762 2026] [security2:error] [pid 20317:tid 20317] [client 162.158.158.244:10839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lizlemos.org.rejuvenationsystems.com"] [uri "/.env.orig"] [unique_id "ab4l5EGqy6GBpX9KDLTCmQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 08:33:16
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:33:11.115612 2026] [security2:error] [pid 27680:tid 27680] [client 162.158.158.244:12894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ggaccounting.services"] [uri "/api/.env"] [unique_id "ab0GR0dVAceDf1OvAdNopwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 07:36:30
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:36:23.774450 2026] [security2:error] [pid 11784:tid 11784] [client 162.158.158.244:12036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.airedaleflyer.com"] [uri "/.git/refs/heads/main"] [unique_id "abz498OF9H_qp4fzDcwQywAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 03:53:57
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:53:54.492018 2026] [security2:error] [pid 30601:tid 30601] [client 162.158.158.244:13015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.punctuminteractive.com"] [uri "/.env.docker"] [unique_id "abzE0uwcY4v8GOnh6L133wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 02:03:38
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:03:33.637197 2026] [security2:error] [pid 4283:tid 4283] [client 162.158.158.244:10489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realtorpaul.com"] [uri "/.env.container"] [unique_id "abyq9fVck7i8e1a5_xa3TQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 11:52:20
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:52:13.326919 2026] [security2:error] [pid 28447:tid 28447] [client 162.158.158.244:11522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.plazahacienda.com"] [uri "/web/.env"] [unique_id "abvjbawz4rVS6PQDFgb3UwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 11:01:18
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:01:12.509233 2026] [security2:error] [pid 2333:tid 2333] [client 162.158.158.244:11250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.gkerby.com"] [uri "/core/.env"] [unique_id "abvXeLf0Gc7PO71vrx8PWwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 09:54:55
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:54:47.786332 2026] [security2:error] [pid 32254:tid 32254] [client 162.158.158.244:12292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.us-war-crimes-commission.org"] [uri "/config/.env.local"] [unique_id "abvH5-WfMpfGJvOi27YABgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 09:07:08
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:07:04.987017 2026] [security2:error] [pid 20994:tid 20994] [client 162.158.158.244:14079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebradleyclinic.com"] [uri "/.env.old"] [unique_id "abu8uK8g-eOZVEoBvgy-xwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 08:38:33
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:38:27.478044 2026] [security2:error] [pid 4418:tid 4418] [client 162.158.158.244:11177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gracebaptisthartsville.com"] [uri "/.env.development.local"] [unique_id "abu2AzZWiHzjn-vubH-SfAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack