๐บ๐ธ
TPI-Abuse
2026-03-21 03:03:08
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 23:03:01.656300 2026] [security2:error] [pid 21105:tid 21105] [client 162.158.62.53:14290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.sparkleluminous.com"] [uri "/config/.env.local"] [unique_id "ab4KZbQLGaa4sd8HVqER8wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 00:12:17
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:12:10.430474 2026] [security2:error] [pid 4973:tid 4973] [client 162.158.62.53:9329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knowbuddy.org.halotoys.com"] [uri "/home/.env"] [unique_id "ab3iWl7gBAxEBmrMw3kgDQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 08:34:58
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:34:53.117564 2026] [security2:error] [pid 17982:tid 17982] [client 162.158.62.53:11660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.beirutbazar.com"] [uri "/.env.json"] [unique_id "ab0GrcYyEm1PDrYNxY8t0gAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 02:40:31
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:40:24.423197 2026] [security2:error] [pid 2306865:tid 2306865] [client 162.158.62.53:14260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.amazinghydraulics.com"] [uri "/home/.env"] [unique_id "abyzmNAg0ddZDCJh0KyIIQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 10:20:50
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:20:44.150338 2026] [security2:error] [pid 30110:tid 30110] [client 162.158.62.53:9398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.doctorc.net"] [uri "/server/.env"] [unique_id "abvN_Kjyz_kH0Z7aqA7DSQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 08:45:48
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:45:42.762231 2026] [security2:error] [pid 30299:tid 30299] [client 162.158.62.53:10175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.djbadger.com"] [uri "/var/www/html/.env"] [unique_id "abu3thhz2AlW-W8qJeh80QAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 03:07:11
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 23:07:04.646404 2026] [security2:error] [pid 21805:tid 21805] [client 162.158.62.53:12049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guitarwisdom.benshermanguitar.com"] [uri "/.env.development.local"] [unique_id "abtoWJN7E0aM5p5WLT3cBQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-18 17:48:33
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 13:48:15.264164 2026] [security2:error] [pid 1508:tid 1508] [client 162.158.62.53:14171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.grspipes.com"] [uri "/config/.env"] [unique_id "abrlX3TyaZgqSry2RkQuGAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-18 16:28:35
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 12:28:22.083649 2026] [security2:error] [pid 32687:tid 32689] [client 162.158.62.53:10386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rosendalsateri.com"] [uri "/.env.json"] [unique_id "abrSprkEV38r2lpPQsFBZgAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-18 14:59:56
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 10:59:51.003910 2026] [security2:error] [pid 5028:tid 5048] [client 162.158.62.53:12555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.linfoulk.org"] [uri "/.env.bak"] [unique_id "abq958JJZ9YJJfKyZO_LWAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-18 13:47:51
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.62.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 09:47:45.802357 2026] [security2:error] [pid 20094:tid 20111] [client 162.158.62.53:10108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accreditedfinancialanalyst.org"] [uri "/.env.local.backup"] [unique_id "abqtAR2CNSfAVIH5NwVWaAAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
security.yc3a.com
2026-03-08 08:54:15
(3 months ago)
162.158.62.53 - - [08/Mar/2026:08:54:14 +0000] "GET /wp-login.php HTTP/2.0" 301 162 "https://www.goo ...
show more
162.158.62.53 - - [08/Mar/2026:08:54:14 +0000] "GET /wp-login.php HTTP/2.0" 301 162 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
Anonymous
2024-11-03 22:14:31
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
Anonymous
2024-11-01 16:34:51
(1 year ago)
Fail2Ban apache-noscript
Bad Web Bot
๐ซ๐ท
Hydra-Shield.fr
2024-09-16 14:58:48
(1 year ago)
Directory Traversal on: /.vscode/sftp.json
Web App Attack