๐ฉ๐ช
BiancaNL
2026-06-24 10:46:20
(4 days ago)
Fail2Ban: jail=nginx-exploit-probes on <fqdn> (port=<port>)
Hacking
๐ท๐บ
DZBOT
2026-06-19 23:46:57
(1 week ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ท๐บ
DZBOT
2026-05-22 16:08:40
(1 month ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ณ๐ฑ
JCB
2026-04-30 08:27:00
(1 month ago)
141.101.98.100 - - [30/Apr/2026:10:40:47 +0300] "GET /gdd/download/eOOWHckPfHnATFw/ HTTP/1.1" 404 28 ...
show more
141.101.98.100 - - [30/Apr/2026:10:40:47 +0300] "GET /gdd/download/eOOWHckPfHnATFw/ HTTP/1.1" 404 280 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)"
show less
Bad Web Bot
Web App Attack
๐ฎ๐ณ
ashwani
2026-04-09 05:03:00
(2 months ago)
[msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /. ...
show more
[msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"]
show less
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-04-09 03:41:43
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 23:41:35.586522 2026] [security2:error] [pid 3909018:tid 3909018] [client 141.101.98.100:12368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.fatjesus.com"] [uri "/.env.backup"] [unique_id "adcf7yyPnI4ZSjX37LRBpAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-09 02:16:41
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 22:16:36.538325 2026] [security2:error] [pid 2781851:tid 2781851] [client 141.101.98.100:13308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.lucid-events.com"] [uri "/.env.local"] [unique_id "adcMBP-QEEUTNqs_RR4ZAQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-09 00:41:07
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 20:41:04.270453 2026] [security2:error] [pid 151797:tid 151891] [client 141.101.98.100:13407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.deathbyaudiostore.com"] [uri "/.env"] [unique_id "adb1oFA9Vl-yHERZqPY_UwAAAgY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-09 00:07:51
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 20:07:45.145193 2026] [security2:error] [pid 3715693:tid 3715693] [client 141.101.98.100:9957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.vespaitaliancafe.com"] [uri "/.env.local"] [unique_id "adbt0Zl2uw-LYwNpt5QbrAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 22:36:40
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 18:36:33.933235 2026] [security2:error] [pid 3008889:tid 3008889] [client 141.101.98.100:14129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.flugstad.com"] [uri "/.env.bak"] [unique_id "adbYcQT1WMTYYJtucYaGGwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 21:13:34
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 17:13:25.216717 2026] [security2:error] [pid 2606092:tid 2606092] [client 141.101.98.100:10157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.lasertherapyoc.com"] [uri "/.env.development.local"] [unique_id "adbE9XcF-GfZtUWeoBb8WQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 16:54:31
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 12:54:24.092094 2026] [security2:error] [pid 3037123:tid 3037123] [client 141.101.98.100:11283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.baystreet.news"] [uri "/api/.env"] [unique_id "adaIQHfJ0dn36bVFxE6BVQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 16:07:41
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 12:07:36.548986 2026] [security2:error] [pid 2726099:tid 2726099] [client 141.101.98.100:11816] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.interiorsolutions-stuart.com"] [uri "/.env.production.local"] [unique_id "adZ9SIGcLz8-EwCAFA6g2AAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 14:27:31
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 10:27:20.432116 2026] [security2:error] [pid 1951290:tid 1951381] [client 141.101.98.100:10640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.joeandlane.com"] [uri "/.envrc"] [unique_id "adZlyCUZp3i2hr7j9QjWCwAAAQY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 12:06:44
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 08:06:40.597939 2026] [security2:error] [pid 2426959:tid 2426959] [client 141.101.98.100:12569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.lamanchaorchards.com"] [uri "/.env.production.bak"] [unique_id "adZE0J81-DSaObP3yRSocQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack