πΊπΈ
almazick
2026-08-17 06:14:04
(1 week ago)
Fail2Ban jail window on srv1.windowrepair.us banned 162.158.63.188 after 1 attempts
Bad Web Bot
Web App Attack
Anonymous
2026-08-11 21:57:08
(2 weeks ago)
162.158.63.188 - - [11/Aug/2026:23:57:07 +0200] "GET /.env.test HTTP/1.1" 404 9206 "-" "Mozilla/5.0 ...
show more
162.158.63.188 - - [11/Aug/2026:23:57:07 +0200] "GET /.env.test HTTP/1.1" 404 9206 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Brute-Force
Web App Attack
π§πͺ
madeit
2026-08-11 16:28:34
(2 weeks ago)
Web App Attack
Anonymous
2026-06-08 07:29:37
(2 months ago)
Aggressive web scan
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-21 22:03:26
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 18:03:19.772343 2026] [security2:error] [pid 581:tid 581] [client 162.158.63.188:9350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.agirlwithaguitar.com"] [uri "/.env.dev.local"] [unique_id "ab8Vp2XtIxrbnc96L16lggAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-21 05:55:47
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 01:55:41.969875 2026] [security2:error] [pid 14231:tid 14231] [client 162.158.63.188:9520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artbytracyjane.com"] [uri "/.env.dev"] [unique_id "ab4y3VXrI0sjyXMODvuDIAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-21 04:04:38
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 00:04:31.288845 2026] [security2:error] [pid 18718:tid 18718] [client 162.158.63.188:11305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thesilverlegion.org"] [uri "/backend/.env"] [unique_id "ab4Yz3xnjNS60PmViqTthAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-21 01:10:42
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:10:39.007251 2026] [security2:error] [pid 22009:tid 22009] [client 162.158.63.188:13876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.amazedbyu.com"] [uri "/.env.local.backup"] [unique_id "ab3wD5jrQ5FdEKvTB7bOqAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-21 00:52:11
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:52:03.635822 2026] [security2:error] [pid 1972:tid 1972] [client 162.158.63.188:14194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thenolangroup.llc"] [uri "/.env.bak"] [unique_id "ab3rs2pRLMQrIe1fXMOpkwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-20 06:00:52
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:00:47.336522 2026] [security2:error] [pid 25619:tid 25619] [client 162.158.63.188:10477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bowdens-landingcom.draindoctor.us"] [uri "/.env.production"] [unique_id "abzijx2jUmpM1eN87AVw2wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-20 01:49:27
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 21:49:19.099766 2026] [security2:error] [pid 3867:tid 3867] [client 162.158.63.188:9888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.margroberts.com"] [uri "/.env.prod"] [unique_id "abynn6yrtzJXM-Hx3512cwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-19 11:47:22
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:47:16.376169 2026] [security2:error] [pid 22208:tid 22208] [client 162.158.63.188:10699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.thomaschemicals.com"] [uri "/.env.production"] [unique_id "abviRDYYf68SSel4ddVJbAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-19 10:13:41
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:13:35.353727 2026] [security2:error] [pid 32284:tid 32284] [client 162.158.63.188:12609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.vanemby.com"] [uri "/public/.env"] [unique_id "abvMT5ygxcNSXfcjl0ku9AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-19 09:49:55
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:49:46.316476 2026] [security2:error] [pid 20740:tid 20740] [client 162.158.63.188:9554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.innolympics.com"] [uri "/srv/.env"] [unique_id "abvGupuyP1EY96DI0GPWIAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-19 09:34:34
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:34:28.604387 2026] [security2:error] [pid 15101:tid 15101] [client 162.158.63.188:11430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.homecheckinmaine.com"] [uri "/var/www/html/.env"] [unique_id "abvDJP1zDNETcfPO5F42QQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack