๐ฆ๐ฑ
router.al
2026-06-05 19:45:45
(3 days ago)
06/05/2026-19:45:45.017005 162.158.158.95 Protocol: 6 GPL WEB_SERVER 403 Forbidden
Port Scan
๐ฌ๐ง
Steve
2026-04-13 12:41:23
(1 month ago)
SQL Injection Attempts
Brute-Force
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-03-21 04:08:58
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 00:08:51.751292 2026] [security2:error] [pid 22520:tid 22520] [client 162.158.158.95:9714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.weather.oxfordgliding.com"] [uri "/.env.tmp"] [unique_id "ab4Z02Bk6M9fEv4t2TZIxQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 03:15:44
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 23:15:38.715731 2026] [security2:error] [pid 23713:tid 23713] [client 162.158.158.95:10501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.brazilianbottom.com"] [uri "/.env.production.bak"] [unique_id "ab4NWpbSDvK8QRenTTlRvAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 09:13:12
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:13:06.361265 2026] [security2:error] [pid 30744:tid 30744] [client 162.158.158.95:13291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.wetlizarddiveteam.com"] [uri "/config/.env"] [unique_id "ab0PovUYRxJJoJf85OvMfgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 07:08:06
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:07:57.264180 2026] [security2:error] [pid 10313:tid 10313] [client 162.158.158.95:12803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.computerian.net"] [uri "/.env.save"] [unique_id "abzyTatYViwx5_QdbN_7EwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 03:42:04
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:41:59.542478 2026] [security2:error] [pid 4382:tid 4382] [client 162.158.158.95:13217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crep-psych.org"] [uri "/.git/logs/HEAD"] [unique_id "abzCB9M-iqc--PbqnqVYeAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 02:37:05
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:36:57.764064 2026] [security2:error] [pid 28266:tid 28266] [client 162.158.158.95:12976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.grainavi.com"] [uri "/.env.staging"] [unique_id "abyyycBBxdjdY4U5jDijngAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 01:22:11
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 21:22:04.539263 2026] [security2:error] [pid 2231802:tid 2231802] [client 162.158.158.95:13409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.tonynvn.me"] [uri "/.env_config"] [unique_id "abyhPM7k1m1Sgle7CQv8wwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 00:21:45
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:21:40.054092 2026] [security2:error] [pid 16644:tid 16644] [client 162.158.158.95:12135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.frenosilent.net.ar"] [uri "/.env2"] [unique_id "abyTFOar6wZnHcgkDHoFCQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 11:37:27
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:37:20.944301 2026] [security2:error] [pid 7559:tid 7559] [client 162.158.158.95:13685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ppichardocigars.com"] [uri "/site/.env"] [unique_id "abvf8FVbBES4j_169N1geQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 11:18:42
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:18:34.157807 2026] [security2:error] [pid 26705:tid 26705] [client 162.158.158.95:12224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.transportdelivery.com"] [uri "/.env.staging"] [unique_id "abvbihYbdTMhDl96HMnVLgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 10:45:58
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:45:54.296821 2026] [security2:error] [pid 415:tid 481] [client 162.158.158.95:10130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.annastasiamason.com"] [uri "/config/.env"] [unique_id "abvT4iSRdOkpTDmUxmXukwAAAcE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 09:29:42
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:29:34.224962 2026] [security2:error] [pid 29433:tid 29433] [client 162.158.158.95:10064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ancientleather.com"] [uri "/.env.dist"] [unique_id "abvB_mXVSNxYB8Y4eWJJVQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 09:11:47
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:11:41.585365 2026] [security2:error] [pid 8148:tid 8148] [client 162.158.158.95:13610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.roselowry.com"] [uri "/config/.env.local"] [unique_id "abu9zU3fGeUMYhFUtWLI4AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack