2026-10-07 20:35:00
(1 hour ago)
Fail2Ban apache-noscript
Bad Web Bot
🇧🇪
madeit
2026-10-07 06:22:33
(15 hours ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 12:42:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 08:42:37.930662 2026] [security2:error] [pid 18774:tid 18774] [client 162.158.159.37:13979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegreatleapforward.com"] [uri "/.htaccess"] [unique_id "are9vSPt5MT7HcaZSjI1MQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-18 19:51:26
(2 weeks ago)
Web App Attack
2026-09-02 04:15:09
(1 month ago)
Fail2Ban apache-noscript
Bad Web Bot
🇧🇪
madeit
2026-08-18 08:39:10
(1 month ago)
Web App Attack
🇺🇸
mnsf
2026-04-03 20:05:57
(6 months ago)
Scanning/Probing (14)
Brute-Force
Web App Attack
🇺🇸
oncord
2026-04-01 16:31:35
(6 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-03-20 06:22:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:22:25.174349 2026] [security2:error] [pid 24929:tid 24929] [client 162.158.159.37:13159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kittencream.com.mykelmilur.com"] [uri "/.env_backup"] [unique_id "abznodbmciujZXvy7uiqJwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 04:28:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 00:28:27.859404 2026] [security2:error] [pid 27063:tid 27063] [client 162.158.159.37:14292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.effectivefirearms.com"] [uri "/.env2"] [unique_id "abzM6yWfzsVpggJt1MMj9gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:55:04
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:54:56.178167 2026] [security2:error] [pid 14720:tid 14720] [client 162.158.159.37:12060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nextngnr.com"] [uri "/docker/.env.local"] [unique_id "abya4NlZ_ihC5wVVbbwYmAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oncord
2026-03-19 20:45:50
(6 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-03-19 11:53:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:53:43.352242 2026] [security2:error] [pid 28230:tid 28230] [client 162.158.159.37:12321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.chuckbellmusic.com"] [uri "/.env~"] [unique_id "abvjxw1SCougNZ1yT4xQ3gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:52:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:52:54.804325 2026] [security2:error] [pid 8869:tid 8869] [client 162.158.159.37:13576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brookspowell.com"] [uri "/.env.dist"] [unique_id "abvVhsvH3TR3N4mc-6RqNwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:24:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:24:06.075658 2026] [security2:error] [pid 13154:tid 13154] [client 162.158.159.37:13439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webersource.com"] [uri "/.env~"] [unique_id "abvOxpErSMw_s5a6xzA4rAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
