🇩🇪
raph
2026-10-13 09:10:08
(41 minutes ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 11:56:38
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 07:56:32.395936 2026] [security2:error] [pid 18579:tid 18579] [client 162.158.23.142:13944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.alknetso.name"] [uri "/.env.backup"] [unique_id "aszK8KQxEZaEqrKl7ZmsTQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 06:17:45
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 02:17:37.779732 2026] [security2:error] [pid 23658:tid 23680] [client 162.158.23.142:10824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moidawg.gg"] [uri "/wp-config.php"] [unique_id "asx7gYiCSbfeQKa50MjETwAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-09 21:59:39
(3 days ago)
Auto-ban: >3000 req/min op 2026-10-09
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-10-09 12:56:18
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 08:56:10.293011 2026] [security2:error] [pid 24217:tid 24235] [client 162.158.23.142:14182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sallykimmel.com"] [uri "/.env.production"] [unique_id "asjkas4XnXHmRB1gWmu3ygAAAVA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 10:38:24
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 06:38:18.181063 2026] [security2:error] [pid 4284:tid 4284] [client 162.158.23.142:13523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ecuablue.farm"] [uri "/.env.backup"] [unique_id "asjEGg6dm0JQWzqr5GV05AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-09 05:47:50
(4 days ago)
[09/Oct/2026:08:47:50 +0300] -- 162.158.23.142 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.en ...
show more
[09/Oct/2026:08:47:50 +0300] -- 162.158.23.142 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.production HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-10-09 01:09:33
(4 days ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based ...
show more
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
mawan
2025-08-01 17:15:19
(1 year ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
mawan
2025-07-23 05:25:19
(1 year ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
2025-04-29 00:59:14
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇩🇪
bitpanda
2025-04-20 00:02:48
(1 year ago)
Malicious activity detected by Imunify360
Brute-Force
SSH
🇪🇸
el-brujo
2025-03-07 10:05:37
(1 year ago)
07/Mar/2025:11:05:36.787193 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
07/Mar/2025:11:05:36.787193 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 162.158.23.142] ModSecurity: Rule 565272a9bf10 [id "932150"][file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "464"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "warzone.elhacker.net"] [uri "/reg.php"] [unique_id "Z8rE8NINbQqoedWBm9qm4AADdxE"]
...
show less
Hacking
Web App Attack
