2026-08-10 02:45:27
(1 month ago)
Fail2Ban apache-noscript
Bad Web Bot
🇧🇪
madeit
2026-08-06 04:06:26
(1 month ago)
Web App Attack
🇺🇸
mnsf
2026-03-31 18:07:11
(5 months ago)
Scanning/Probing (13)
Brute-Force
Web App Attack
🇺🇸
octageeks.com
2026-03-27 04:07:10
(5 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 07:31:55
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:31:50.371700 2026] [security2:error] [pid 29882:tid 29882] [client 162.158.159.38:13009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.airedaleflyer.com"] [uri "/.env.development"] [unique_id "abz35oVUVmZhBSSwDdiyXAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 03:19:40
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:19:31.793547 2026] [security2:error] [pid 1432:tid 1432] [client 162.158.159.38:10232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.donshotrodshop.net"] [uri "/.git/config"] [unique_id "aby8w6hNa0CEV8v-s36xXgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 12:01:19
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 08:01:13.460121 2026] [security2:error] [pid 5526:tid 5526] [client 162.158.159.38:13676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.awcadvocate.com"] [uri "/api/.env"] [unique_id "abvlid9zv5fSRaoH28F99AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:35:06
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:34:56.764373 2026] [security2:error] [pid 26463:tid 26519] [client 162.158.159.38:12260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.zammconstruction.com"] [uri "/.env.container"] [unique_id "abvfYCMnDW69Jjin2h06HQAAAVE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:50:23
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:50:16.188939 2026] [security2:error] [pid 9846:tid 9846] [client 162.158.159.38:13566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brookspowell.com"] [uri "/home/.env"] [unique_id "abvU6OXE4NYtljGX4QTwtwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:26:02
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:25:52.741016 2026] [security2:error] [pid 11576:tid 11576] [client 162.158.159.38:9246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.zabyte.net"] [uri "/api/.env"] [unique_id "abvPMK0CPC1g5UM5aYINogAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:49:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:49:07.796828 2026] [security2:error] [pid 18408:tid 18408] [client 162.158.159.38:12614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.intnlc.org"] [uri "/config/.env.local"] [unique_id "abu4g2hblzEv5aip4TIE5QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:25:44
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:25:38.156581 2026] [security2:error] [pid 17431:tid 17431] [client 162.158.159.38:9516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crewspacer.com.coalminer.com"] [uri "/.env.prod"] [unique_id "abuzAkRPpPIj2EYuAE_qawAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 07:37:47
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 03:37:44.071775 2026] [security2:error] [pid 25422:tid 25422] [client 162.158.159.38:11618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeanniemorrislaw.com"] [uri "/home/.env"] [unique_id "abunyH1qBxeBPaDsAGOsWgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 03:23:47
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 23:23:41.063300 2026] [security2:error] [pid 24472:tid 24472] [client 162.158.159.38:14076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.york.cloudex.link"] [uri "/var/www/html/.env"] [unique_id "abtsPWkIwIjGfAt73UkyAQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-18 21:53:04
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 17:52:59.313294 2026] [security2:error] [pid 18968:tid 18968] [client 162.158.159.38:11661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.plava.org"] [uri "/.env.old"] [unique_id "abseuwr-9A3QUNqysHVLXwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
