🇺🇸
TPI-Abuse
2026-10-08 06:49:04
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 02:48:55.715569 2026] [security2:error] [pid 14079:tid 14079] [client 162.159.119.18:12088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dogdimension.com"] [uri "/.env.old"] [unique_id "asc815aXv8QGMBC4CCT14QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 00:35:32
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 20:35:24.784354 2026] [security2:error] [pid 22389:tid 22389] [client 162.159.119.18:9889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "versahealthcare.com"] [uri "/.env.local"] [unique_id "asRCTISPzPxAlYdKtThAHAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-27 12:24:01
(1 week ago)
Web App Attack
🇧🇪
madeit
2026-08-31 02:59:42
(1 month ago)
Web App Attack
2026-08-28 15:07:13
(1 month ago)
Fail2Ban - NGINX Honeypot - Botnet
Bad Web Bot
🇮🇩
securejdprop
2026-08-21 06:14:57
(1 month ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇧🇪
madeit
2026-08-19 09:34:56
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 19:50:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 15:50:35.181226 2026] [security2:error] [pid 28500:tid 28500] [client 162.159.119.18:12369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.teenybikinigirls.com"] [uri "/.env.save"] [unique_id "acWOC19WPXXNjaJt7I6uvAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 13:14:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 09:14:12.645791 2026] [security2:error] [pid 6102:tid 6102] [client 162.159.119.18:12945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.theknowledgemaster.com"] [uri "/srv/.env"] [unique_id "ab_rJO51rB6zclEjMzVMQAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-03-20 11:07:42
(6 months ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 09:09:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:09:17.151230 2026] [security2:error] [pid 27439:tid 27439] [client 162.159.119.18:11820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.area52designs.com"] [uri "/docker/.env"] [unique_id "ab0OvajfYAgXqwEiIG3ZYQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 08:52:41
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:52:36.428890 2026] [security2:error] [pid 29991:tid 29991] [client 162.159.119.18:14216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.qovintheloop.org"] [uri "/.env.orig"] [unique_id "ab0K1HcCoMtqYUXnL8QTcAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 07:20:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:20:42.533280 2026] [security2:error] [pid 21633:tid 21633] [client 162.159.119.18:12238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.solaire-chauffe-eau.info"] [uri "/site/.env"] [unique_id "abz1SrKD21p4I0VOPO52RAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 06:13:03
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:12:58.853636 2026] [security2:error] [pid 29128:tid 29128] [client 162.159.119.18:11970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.drmaryscott.com"] [uri "/private/.env"] [unique_id "abzlagF5GqL_owJIIetxPwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 05:36:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 01:36:28.656963 2026] [security2:error] [pid 20789:tid 20789] [client 162.159.119.18:9849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rums-of-the-world.com"] [uri "/.env.save"] [unique_id "abzc3D1vpjKJjywRGZlCGgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
