๐ณ๐ฑ
COMPLEX
2026-06-10 00:19:52
(6 days ago)
Unsolicited TCP traffic | Action: DROP | Port 8443
Brute-Force
๐บ๐ธ
mnsf
2026-04-06 05:06:12
(2 months ago)
Scanning/Probing (15)
Brute-Force
Web App Attack
๐บ๐ธ
mnsf
2026-04-01 19:06:02
(2 months ago)
Scanning/Probing (16)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 04:54:18
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 00:54:09.393515 2026] [security2:error] [pid 16465:tid 16465] [client 162.158.159.53:13377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lizlemos.org.rejuvenationsystems.com"] [uri "/core/.env"] [unique_id "ab4kcSpgJBJUeVyj0pWSlgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 00:38:29
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:38:22.246049 2026] [security2:error] [pid 9602:tid 9602] [client 162.158.159.53:11479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.hisim.com.tr"] [uri "/.env.backup"] [unique_id "ab3ofrgZgQ8v5K6sFLIFcAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 00:18:48
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:18:42.282735 2026] [security2:error] [pid 8437:tid 8437] [client 162.158.159.53:11409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aiamur.photo"] [uri "/config/.env.local"] [unique_id "ab3j4s7UN3nr21J-Dvc3WwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 08:28:25
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:28:21.762375 2026] [security2:error] [pid 2895950:tid 2895950] [client 162.158.159.53:14100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theartbrush.com"] [uri "/.env1"] [unique_id "ab0FJUEK_2Cnixyifkv9zgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 04:11:51
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 00:11:44.088657 2026] [security2:error] [pid 25556:tid 25556] [client 162.158.159.53:9608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tropicallabs.com"] [uri "/.env.backup"] [unique_id "abzJAI2BkSb-eCXphLzivQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 02:22:36
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:22:29.292004 2026] [security2:error] [pid 29178:tid 29178] [client 162.158.159.53:11036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "astariafilms.com"] [uri "/.env.bak"] [unique_id "abyvZerQWhri6mNa5oBt7gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 11:50:27
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:50:21.085171 2026] [security2:error] [pid 19202:tid 19202] [client 162.158.159.53:9873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.martinvjohnson.com"] [uri "/.env_secret"] [unique_id "abvi_ZqXCbDqs7u3OJPOKwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 10:17:25
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:17:16.785727 2026] [security2:error] [pid 27354:tid 27354] [client 162.158.159.53:10685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rayeliotschwartz.zenmonkeyproject.com"] [uri "/.env.bak"] [unique_id "abvNLB2oz--2E4NC9rE6cgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 09:23:25
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:23:17.747057 2026] [security2:error] [pid 3577:tid 3577] [client 162.158.159.53:14250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thewillsmith.com"] [uri "/.env.bak"] [unique_id "abvAhSO6797ecd0E1LEwdQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 08:57:47
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:57:39.368390 2026] [security2:error] [pid 8807:tid 8807] [client 162.158.159.53:13481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.furbabieslivesmatter.com"] [uri "/root/.env"] [unique_id "abu6gw2rKux-YvnzslCTmwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 08:42:43
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:42:34.242261 2026] [security2:error] [pid 25793:tid 25793] [client 162.158.159.53:9591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.kirt.us"] [uri "/.env.example"] [unique_id "abu2-q7m-y2dUzQF5bDgpgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 08:19:14
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:19:07.402763 2026] [security2:error] [pid 13209:tid 13209] [client 162.158.159.53:9750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blfmarine.com.lakesidedetectiveagency.com"] [uri "/.env.dev.local"] [unique_id "abuxe4mKXD1mkIBnc2BQgQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack