🇨🇿
Prcek
2026-10-08 00:34:26
(6 days ago)
PortScan:HOST=162.158.159.143,DPORTS=443
Port Scan
🇺🇸
TPI-Abuse
2026-09-26 09:13:09
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 05:13:05.144636 2026] [security2:error] [pid 22516:tid 22516] [client 162.158.159.143:10624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "misomayo.com"] [uri "/.htaccess"] [unique_id "areMoREkUWZLzEeYIThNpgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-18 19:51:54
(3 weeks ago)
Web App Attack
🇩🇪
acadeova
2026-04-15 13:46:26
(5 months ago)
🚨 Recon detected (nft drop)
SRC=162.158.159.143
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(jou ...
show more
🚨 Recon detected (nft drop)
SRC=162.158.159.143
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
🇻🇳
Xuan Can
2026-04-13 11:22:16
(6 months ago)
(mod_security) mod_security (id:1900947723) triggered by 162.158.159.143 (US/United States/-): 1 in ...
show more
(mod_security) mod_security (id:1900947723) triggered by 162.158.159.143 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 18:22:10.683017 2026] [security2:error] [pid 11722:tid 11758] [client 162.158.159.143:0] ModSecurity: Access denied with code 403 (phase 1). String match "/phpmyadmin" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "60"] [id "1900947723"] [msg "Deny phpMyAdmin"] [hostname "web30s.vn"] [uri "/phpmyadmin"] [unique_id "adzR4pwLOh355ApeG5cM1AAAAEc"]
show less
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-03-20 09:34:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:34:07.356155 2026] [security2:error] [pid 30379:tid 30379] [client 162.158.159.143:12001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thecharlesmadu.com"] [uri "/config/.env"] [unique_id "ab0UjxRZ-Ljvm-sE-SXVaAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 08:56:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:56:51.903376 2026] [security2:error] [pid 32048:tid 32048] [client 162.158.159.143:13139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "72blues.com"] [uri "/admin/.env"] [unique_id "ab0L00UZaOpoXfsP7gmZ3AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 07:04:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:04:45.062350 2026] [security2:error] [pid 5117:tid 5117] [client 162.158.159.143:12869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tckgbookkeeping.biz"] [uri "/.env.development"] [unique_id "abzxjbfgUMysjVoVwXERDwAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:14:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:14:10.472152 2026] [security2:error] [pid 30046:tid 30046] [client 162.158.159.143:11509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.km.digitalsolutions.help"] [uri "/.env.backup"] [unique_id "abyRUowTl8Kl-ey-2SBy5QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:20:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:20:31.698586 2026] [security2:error] [pid 22933:tid 23039] [client 162.158.159.143:12232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.stone-doyle.com"] [uri "/.env.production"] [unique_id "abvN7-G-tjlgL9jEgA_6_wAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 09:58:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:58:11.162996 2026] [security2:error] [pid 10475:tid 10475] [client 162.158.159.143:12530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.dezignz.com"] [uri "/.env1"] [unique_id "abvIs3RTXtv6YoGVdIIAAQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 09:42:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:42:17.047052 2026] [security2:error] [pid 6311:tid 6311] [client 162.158.159.143:13996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.lubbockknights.com"] [uri "/.env.dev"] [unique_id "abvE-QMyYEGV94RIQ5EPxAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:47:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:47:13.000231 2026] [security2:error] [pid 20026:tid 20026] [client 162.158.159.143:13175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.silvermoonpizza.com"] [uri "/.env_secret"] [unique_id "abu4EOyRX6zadMVSBfDuJAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:00:34
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:00:22.679490 2026] [security2:error] [pid 7896:tid 7896] [client 162.158.159.143:12787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "topsecret-si.com.f4fbbs.com"] [uri "/.env.staging"] [unique_id "abutFveF5zl1VKa6Te2DZwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 05:06:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 01:06:25.121625 2026] [security2:error] [pid 14344:tid 14344] [client 162.158.159.143:14023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aandbnaturalfoods.com"] [uri "/.env.dev"] [unique_id "abuEUehiNX2ixS1t2VTXCAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
