🇧🇪
madeit
2026-10-22 03:30:20
UTC ·
(2 weeks ago)
Web App Attack
🇧🇪
madeit
2026-10-08 19:54:29
UTC ·
(4 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 19:45:40
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 15:45:33.893963 2026] [security2:error] [pid 16257:tid 16257] [client 162.158.159.138:1053 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 15:45:33.893963 2026] [security2:error] [pid 16257:tid 16257] [client 162.158.159.138:10531] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bearssd.org"] [uri "/.htaccess"] [unique_id "arrD3R4eD1s2jtmyhaO9vgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 14:44:57
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 10:44:53.206843 2026] [security2:error] [pid 3078:tid 3078] [client 162.158.159.138:13454] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 10:44:53.206843 2026] [security2:error] [pid 3078:tid 3078] [client 162.158.159.138:13454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "personal-sportswear.com"] [uri "/wp-config.php"] [unique_id "arfaZUjUu1clh5xZO5ZeDQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 12:14:29
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 08:14:27.120606 2026] [security2:error] [pid 4720:tid 4736] [client 162.158.159.138:14209] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 08:14:27.120606 2026] [security2:error] [pid 4720:tid 4736] [client 162.158.159.138:14209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laradioactivitat.com"] [uri "/wp-config.php"] [unique_id "are3I8rN3e2ecaIbuMGlngAAAE4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-30 00:40:25
UTC ·
(2 months ago)
Web App Attack
🇮🇩
securejdprop
2026-08-21 10:03:59
UTC ·
(2 months ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇺🇸
mnsf
2026-04-04 05:06:05
UTC ·
(7 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 04:58:14
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 00:58:07.775810 2026] [security2:error] [pid 21532:tid 21532] [client 162.158.159.138:1110 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 00:58:07.775810 2026] [security2:error] [pid 21532:tid 21532] [client 162.158.159.138:11100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bakerimaging.com"] [uri "/private/.env"] [unique_id "ab4lX96KL4B7VWZJceYVrgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:27:29
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:27:22.351124 2026] [security2:error] [pid 868:tid 868] [client 162.158.159.138:14195] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:27:22.351124 2026] [security2:error] [pid 868:tid 868] [client 162.158.159.138:14195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.intrialconsultants.com"] [uri "/.env.orig"] [unique_id "ab3l6gh8l3KwnWIGB0MyXAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 09:28:33
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:28:26.282131 2026] [security2:error] [pid 23152:tid 23152] [client 162.158.159.138:1079 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:28:26.282131 2026] [security2:error] [pid 23152:tid 23152] [client 162.158.159.138:10791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.williambarfoot.com"] [uri "/.env~"] [unique_id "ab0TOqYONSeYkeKdY2mGPgAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 02:56:09
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:56:04.798308 2026] [security2:error] [pid 24349:tid 24349] [client 162.158.159.138:9498 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:56:04.798308 2026] [security2:error] [pid 24349:tid 24349] [client 162.158.159.138:9498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.backspaced.com"] [uri "/home/.env"] [unique_id "aby3RB_sHUy9XYXRB_aO_wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 01:25:26
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 21:25:19.455226 2026] [security2:error] [pid 12330:tid 12330] [client 162.158.159.138:1275 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 21:25:19.455226 2026] [security2:error] [pid 12330:tid 12330] [client 162.158.159.138:12758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.zmnc.tr"] [uri "/.env.dev.local"] [unique_id "abyh_3W0hTRvYXGZhhzLcgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:22:06
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:21:59.047388 2026] [security2:error] [pid 16663:tid 16663] [client 162.158.159.138:1303 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:21:59.047388 2026] [security2:error] [pid 16663:tid 16663] [client 162.158.159.138:13033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.frenosilent.net.ar"] [uri "/.env.orig"] [unique_id "abyTJ8z5yAScsMu_ARPATAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:31:50
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:31:40.987545 2026] [security2:error] [pid 20000:tid 20000] [client 162.158.159.138:1407 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:31:40.987545 2026] [security2:error] [pid 20000:tid 20000] [client 162.158.159.138:14077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.circleinthesquare.org"] [uri "/.env2"] [unique_id "abvQjDlTA4dcsugerAOp2AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
