๐ต๐ฑ
IROK
2026-04-02 09:52:31
(2 months ago)
Malware/WebShell Scan blocked by ModSecurity
...
Hacking
๐จ๐ฆ
Blinker73
2026-03-24 11:56:37
(2 months ago)
162.158.63.190 - - [24/Mar/2026:07:56:36 -0400] "GET /.env~ HTTP/2.0" 403 107 "-" "-"
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 14:13:03
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 10:12:59.600467 2026] [security2:error] [pid 22112:tid 22112] [client 162.158.63.190:12877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.deal-arabia.com"] [uri "/.env.production"] [unique_id "ab6naydse75KsDzgQ4Um0gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 03:50:44
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 23:50:36.050810 2026] [security2:error] [pid 3535:tid 3535] [client 162.158.63.190:12693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.choice-builders.com"] [uri "/srv/.env"] [unique_id "ab4VjCl71pGrajFx6aNKiAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 01:22:47
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:22:43.175990 2026] [security2:error] [pid 20709:tid 20709] [client 162.158.63.190:13124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.liddlesports.com"] [uri "/docker/.env.local"] [unique_id "ab3y43u6kqkrde3JKTIp7AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 08:35:23
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:35:18.859156 2026] [security2:error] [pid 16232:tid 16232] [client 162.158.63.190:13625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.celltechs.net"] [uri "/.env"] [unique_id "ab0GxoDServqAfJnw43GYQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 03:39:22
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:39:18.086279 2026] [security2:error] [pid 29051:tid 29075] [client 162.158.63.190:12780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.asetiadi.net"] [uri "/api/.env"] [unique_id "abzBZvq4zbbIV6We42hulQAAAok"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 01:38:42
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 21:38:35.628990 2026] [security2:error] [pid 23305:tid 23305] [client 162.158.63.190:13950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brandoncomputergeeks.com.directcch.com"] [uri "/config/.env"] [unique_id "abylG10dxbxgoOEeMNzzHQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 00:52:07
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:51:57.286744 2026] [security2:error] [pid 2510:tid 2510] [client 162.158.63.190:12105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.crossfiregold.com"] [uri "/.env.php"] [unique_id "abyaLcCYeOZVZwf2woZuXAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 11:36:30
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:36:23.560104 2026] [security2:error] [pid 12459:tid 12459] [client 162.158.63.190:13617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.test.boardingatthewedge.com"] [uri "/site/.env"] [unique_id "abvftxlLuMMiGVIUmOvqRgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 10:55:57
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:55:49.710507 2026] [security2:error] [pid 32133:tid 32133] [client 162.158.63.190:13312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.liferestorationproject.com"] [uri "/web/.env"] [unique_id "abvWNZaiYZjvboPBRcdR7wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 10:20:12
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:20:01.019668 2026] [security2:error] [pid 11461:tid 11461] [client 162.158.63.190:10209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.juca.com.mx"] [uri "/.env.bak"] [unique_id "abvN0YgWuz2bydQHyefzSwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 09:25:55
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:25:48.147833 2026] [security2:error] [pid 19704:tid 19704] [client 162.158.63.190:13422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boblog111.com"] [uri "/docker/.env"] [unique_id "abvBHAvxlI6bXCPtHCH1mwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 09:02:26
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:02:16.760805 2026] [security2:error] [pid 14632:tid 14632] [client 162.158.63.190:11109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.presucad.com"] [uri "/config/.env.local"] [unique_id "abu7mPF835W8qgkxzMkp5AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 07:57:29
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 03:57:20.362430 2026] [security2:error] [pid 30287:tid 30287] [client 162.158.63.190:14022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.shelbynash.com"] [uri "/docker/.env"] [unique_id "abusYLGExR93oyGAhmECNAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack