🇺🇸
TPI-Abuse
2026-10-08 03:38:10
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.22 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 23:38:01.004394 2026] [security2:error] [pid 30714:tid 30714] [client 162.159.119.22:13100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arellasoc.com"] [uri "/.env"] [unique_id "ascQGZrXHp8dS0ssspEO1wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 02:05:07
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 162.159.119.22 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 162.159.119.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 22:05:04.042083 2026] [security2:error] [pid 26864:tid 26864] [client 162.159.119.22:11503] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.register-yacht-cook-islands.com|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.register-yacht-cook-islands.com"] [uri "/.terraform/terraform.tfstate.backup"] [unique_id "asWo0LDugI2C6ZGzFhh82QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-15 02:41:43
(4 weeks ago)
Web App Attack
🇧🇪
madeit
2026-08-28 19:12:39
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 18:27:18
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.22 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:27:11.728388 2026] [security2:error] [pid 19382:tid 19382] [client 162.159.119.22:9872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fixmywellwater.com"] [uri "/.git/config"] [unique_id "apHS__lfrf16JuuxH-a9twAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-04-25 21:24:03
(5 months ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
mnsf
2026-04-09 00:05:12
(6 months ago)
Scanning/Probing (16)
Brute-Force
Web App Attack
🇺🇸
octageeks.com
2026-04-01 04:06:09
(6 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇧🇾
lns.bz
2026-03-30 13:04:09
(6 months ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 23:36:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.22 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 19:36:12.771022 2026] [security2:error] [pid 26829:tid 26829] [client 162.159.119.22:13523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.bikinitweets.com"] [uri "/private/.env"] [unique_id "acm3bD_NEbCsPtlOzYWjyAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 16:37:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.22 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 12:37:19.100910 2026] [security2:error] [pid 27994:tid 27994] [client 162.159.119.22:12267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldandsilverni.com"] [uri "/.env_secret"] [unique_id "aclVP7iqYpnrHhcYIYjYYQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-03-20 17:06:20
(6 months ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)
Hacking
Web App Attack
🇺🇸
mnsf
2026-03-20 12:06:46
(6 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇺🇸
lnklnx
2026-03-20 11:37:58
(6 months ago)
www.lincolnclan.com:443 162.159.119.22 - - [20/Mar/2026:06:37:45 -0500] "GET /.env_settings HTTP/1.1 ...
show more
www.lincolnclan.com:443 162.159.119.22 - - [20/Mar/2026:06:37:45 -0500] "GET /.env_settings HTTP/1.1" 401 5245 "-" "-"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 06:31:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.22 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:31:31.380474 2026] [security2:error] [pid 15160:tid 15160] [client 162.159.119.22:12188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.atidysort.com"] [uri "/app/.env"] [unique_id "abzpw8mtPOkBk2DnUG5iZQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
