🇺🇸
mnsf
2026-10-19 20:05:06
(1 day ago)
Abuse Detected (9)
Brute-Force
Web App Attack
2026-10-19 18:00:02
(1 day ago)
suspicious request in access.log
Web App Attack
🇳🇱
Alt255
2026-10-19 17:12:10
(1 day ago)
[cb-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 129.121.87.138 - - [19/Oct/2026:19:12:05 +0200] "GET /.env HTTP/2.0" 404 16277 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 15:04:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 11:04:06.633755 2026] [security2:error] [pid 27692:tid 27692] [client 129.121.87.138:57568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendykim.com"] [uri "/.env"] [unique_id "atYxZgfkmIhPt4d_BGvt5gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 11:15:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 07:15:39.750211 2026] [security2:error] [pid 30770:tid 30876] [client 129.121.87.138:39024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "30acre.net"] [uri "/.env"] [unique_id "atX72_jBKByIMbULKnVUYQAAAg0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 10:43:18
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 06:43:14.739540 2026] [security2:error] [pid 28266:tid 28266] [client 129.121.87.138:40092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "k-h-w.com"] [uri "/.env"] [unique_id "atX0QnUkXnHFnx7xmL2TxwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 10:18:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 06:18:32.780889 2026] [security2:error] [pid 16643:tid 16643] [client 129.121.87.138:57258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ekur-art.com"] [uri "/.env"] [unique_id "atXueCeuLkHPtqfFCaoP1AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-19 09:50:20
(1 day ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 08:02:35
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 04:02:30.557249 2026] [security2:error] [pid 22777:tid 22777] [client 129.121.87.138:60562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arklatexds.com"] [uri "/.env"] [unique_id "atXOlmw7APvWUjca4ilSPAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 04:58:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 00:57:59.924012 2026] [security2:error] [pid 6803:tid 6803] [client 129.121.87.138:41544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "podbillspec.com"] [uri "/.env"] [unique_id "atWjV2JwJPM9kkSGn15WzQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-25 11:56:17
(3 weeks ago)
[formsbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[formsbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 129.121.87.138 - - [25/Sep/2026:13:55:57 +0200] "GET /.env HTTP/1.1" 301 437 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 22:07:22
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 18:07:19.204227 2026] [security2:error] [pid 1398372:tid 1398372] [client 129.121.87.138:40662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mairslair.com"] [uri "/wp-config.php.bak"] [unique_id "arL8F7ZVKyA2r_IwKb0VqwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:48:58
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:48:54.263117 2026] [security2:error] [pid 9996:tid 9996] [client 129.121.87.138:38002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keeftone.com"] [uri "/wp-config.php.bak"] [unique_id "arLptlBmyGeJxdi2gGQjGgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:08:24
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:08:20.537552 2026] [security2:error] [pid 26405:tid 26405] [client 129.121.87.138:41356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sailorbandido.com"] [uri "/wp-config.php.bak"] [unique_id "arLgNCy3KMNtyUqxR9mhswAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:40:52
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 129.121.87.138 (server.ustradeent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:40:45.814298 2026] [security2:error] [pid 29021:tid 29021] [client 129.121.87.138:37336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "willieplaymoreband.com"] [uri "/wp-config.php.bak"] [unique_id "arK9neU9cnS0arXv8xDqGwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
