๐ง๐ช
madeit
2026-10-15 12:25:58
(1 day ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 22:10:48
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:10:19.348989 2026] [security2:error] [pid 28025:tid 28025] [client 162.158.23.207:9575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windisfun.com"] [uri "/.env.staging"] [unique_id "as_9y078JuOLJhCCs1DTSQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 06:20:25
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 02:20:09.834797 2026] [security2:error] [pid 18862:tid 18862] [client 162.158.23.207:12887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "batw.net"] [uri "/.env.old"] [unique_id "as8fGdJlvCCCup_MSs8VZwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 05:59:54
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 01:59:48.766842 2026] [security2:error] [pid 20143:tid 20143] [client 162.158.23.207:11811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twinls.com"] [uri "/.env.old"] [unique_id "as3I1EZM49DbVpVfWktcEAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 22:44:43
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 18:44:35.058709 2026] [security2:error] [pid 12287:tid 12287] [client 162.158.23.207:11860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.luxebikinis.com"] [uri "/.env.local"] [unique_id "aswRUwANrJTjOislwvsDeQAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 09:31:43
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.23.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.23.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 05:31:33.938166 2026] [security2:error] [pid 5629:tid 5629] [client 162.158.23.207:11109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kunzteam.com"] [uri "/.env"] [unique_id "astXdVwwxI2lpAC_XvicvQAAADY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
bohl-aiG5aef
2026-10-08 09:05:53
(1 week ago)
Suricata Alert [SID:2019526] ET WEB_SERVER WEB-PHP phpinfo access
Web App Attack
๐ง๐ช
madeit
2026-10-03 07:50:13
(1 week ago)
Web App Attack
๐ฉ๐ช
F242
2026-04-01 21:33:37
(6 months ago)
Wordpress soft lock
Web App Attack
๐ซ๐ท
dynamix
2026-03-21 02:01:33
(6 months ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-03-04 14:39:41
(7 months ago)
162.158.23.207 - - [04/Mar/2026:16:37:44 +0200] "POST /xmlrpc.php HTTP/1.0" 200 433 "-" "Mozilla/5.0 ...
show more
162.158.23.207 - - [04/Mar/2026:16:37:44 +0200] "POST /xmlrpc.php HTTP/1.0" 200 433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/77.0.0.0 Safari/537.36"
162.158.23.207 - - [04/Mar/2026:16:37:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/77.0.0.0 Safari/537.36"
162.158.23.207 - - [04/Mar/2026:16:38:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 219 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36"
162.158.23.207 - - [04/Mar/2026:16:38:43 +0200] "POST /xmlrpc.php HTTP/1.0" 200 433 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36"
162.158.23.207 - - [04/Mar/2026:16:39:40 +0200] "POST /xmlrpc.php HTTP/1.0" 200 433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/76.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
Anonymous
2025-07-16 16:45:59
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐บ๐ธ
mawan
2025-05-27 02:14:18
(1 year ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
Anonymous
2025-04-14 05:31:27
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2025-03-12 02:22:09
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH