🇩🇪
abdubhai
2026-05-27 23:59:43
(2 weeks ago)
162.158.159.5 - - [28/May/2026:0
...
Brute-Force
🇺🇸
TPI-Abuse
2026-03-22 10:23:18
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 06:23:10.914867 2026] [security2:error] [pid 2605:tid 2605] [client 162.158.159.5:10052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.brazilianbikinis.com"] [uri "/.env.development"] [unique_id "ab_DDuAgrbAYfSk70iv97wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 03:05:28
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:05:21.971781 2026] [security2:error] [pid 17324:tid 17324] [client 162.158.159.5:14270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menafert.menagri.com"] [uri "/.env.dist"] [unique_id "aby5cZ8kYUv2eVeVfsvr0AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:21:58
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:21:52.027995 2026] [security2:error] [pid 14116:tid 14116] [client 162.158.159.5:12831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.greatnorthernstrategies.com"] [uri "/.env.prod"] [unique_id "abyTIJ1gGzL4mDXeqapXygAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 12:01:39
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 08:01:33.274711 2026] [security2:error] [pid 5530:tid 5530] [client 162.158.159.5:11525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.awcadvocate.com"] [uri "/config/.env.local"] [unique_id "abvlnXXVo2gmMTtR_A634gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:50:43
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:50:35.672473 2026] [security2:error] [pid 9969:tid 9969] [client 162.158.159.5:14028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brookspowell.com"] [uri "/root/.env"] [unique_id "abvU-5M53AshEOLHB8QpuAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:20:20
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:20:11.644561 2026] [security2:error] [pid 9710:tid 9710] [client 162.158.159.5:11053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.webersource.com"] [uri "/.env.dev.local"] [unique_id "abvN26Ykuooe24WEBxypiAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:03:11
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:03:06.226369 2026] [security2:error] [pid 1303844:tid 1303844] [client 162.158.159.5:9889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.cyqci.eu"] [uri "/.env.docker"] [unique_id "abvJ2jC-o9yY3PARaiOYmgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 09:21:14
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:21:08.841228 2026] [security2:error] [pid 8084:tid 8084] [client 162.158.159.5:14141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.awesomeenergyrecords.com"] [uri "/.env.production.bak"] [unique_id "abvABGsSBAHfuUwokUvM6wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:41:21
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:41:16.262915 2026] [security2:error] [pid 30306:tid 30306] [client 162.158.159.5:9434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wmazanitis.drxcontent.com"] [uri "/.env.development.local"] [unique_id "abu2rMGaquJFk96EmHRL5QAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:17:07
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:17:02.691852 2026] [security2:error] [pid 10716:tid 10716] [client 162.158.159.5:11339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.mms-boss.net"] [uri "/docker/.env"] [unique_id "abuw_sUAZG4T68JZQO-fegAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 05:27:55
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 01:27:49.522856 2026] [security2:error] [pid 12665:tid 12665] [client 162.158.159.5:12023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.alphacom.us"] [uri "/config/.env"] [unique_id "abuJVYXyksE8MzyQkLvcLQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 04:14:16
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 00:14:10.728747 2026] [security2:error] [pid 10220:tid 10220] [client 162.158.159.5:11087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "major33.com.cruanyes.com"] [uri "/.env.bak"] [unique_id "abt4EhAoUlgpOkff5X7i0wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-18 21:38:42
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 17:38:35.870806 2026] [security2:error] [pid 32610:tid 32621] [client 162.158.159.5:12717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uniquelynoel.com"] [uri "/www/.env"] [unique_id "absbW0-QCIE4DgPMYjRFLQAAAUk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-18 20:38:58
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 16:38:48.749991 2026] [security2:error] [pid 30689:tid 30689] [client 162.158.159.5:10367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.childrenscliniciws.org"] [uri "/srv/.env"] [unique_id "absNWI-lP4w1WjVZIrNG2wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack