๐ง๐ช
madeit
2026-09-06 07:48:59
(10 hours ago)
Web App Attack
๐ท๐บ
DZBOT
2026-08-13 14:59:28
(3 weeks ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ฌ๐ง
Axel
2026-06-20 13:46:02
(2 months ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env.dist Se ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env.dist Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
๐ฏ๐ต
S.O.B.A. Dev.
2026-06-02 12:15:39
(3 months ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐ฏ๐ต
S.O.B.A. Dev.
2026-04-23 17:54:43
(4 months ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐บ๐ธ
TPI-Abuse
2026-04-08 13:44:10
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 09:43:49.664524 2026] [security2:error] [pid 2293556:tid 2293556] [client 141.101.99.92:13405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "francisautodetailing.com"] [uri "/.env.development"] [unique_id "adZblfYVmObsp_VE1prC_AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 13:11:39
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 09:11:31.598712 2026] [security2:error] [pid 2179538:tid 2179538] [client 141.101.99.92:11776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vip.veneerdent.com"] [uri "/.env.tmp"] [unique_id "adZUA3TwBxqq7x_aZJYJvAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 11:23:45
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 07:23:31.550829 2026] [security2:error] [pid 2404593:tid 2404593] [client 141.101.99.92:14273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.yongmeihu.com"] [uri "/.env.local"] [unique_id "adY6s0bVA7qJKRg_CesArAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 08:53:58
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 04:53:52.938656 2026] [security2:error] [pid 2580457:tid 2580457] [client 141.101.99.92:12049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nifeconsult.com"] [uri "/.env.dist"] [unique_id "adYXoJHVLnLti840eG4AkAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 08:20:51
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 04:20:44.308595 2026] [security2:error] [pid 2521128:tid 2521128] [client 141.101.99.92:10790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "diamenty.info"] [uri "/core/.env"] [unique_id "adYP3OiHXhYMNUcJbYsCOwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 05:33:26
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 01:33:19.352700 2026] [security2:error] [pid 2183266:tid 2183266] [client 141.101.99.92:12661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.donnrowe.com"] [uri "/.env.production"] [unique_id "adXon4veJdF5I8DspDn0DgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 04:21:27
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 00:21:18.690458 2026] [security2:error] [pid 2444360:tid 2444360] [client 141.101.99.92:11865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ionekotis.net"] [uri "/site/.env"] [unique_id "adXXvgyBCeL3dy8vkpjKpwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-07 13:44:37
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 09:44:30.750665 2026] [security2:error] [pid 2302388:tid 2302388] [client 141.101.99.92:12433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.thompsonboatworks.com"] [uri "/.env.bak"] [unique_id "adUKPmB9O63Col-vmEtQIQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-07 03:55:30
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 23:55:04.689713 2026] [security2:error] [pid 779566:tid 779566] [client 141.101.99.92:13179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.casagrotto.com"] [uri "/api/.env"] [unique_id "adSAGGHHSCDnRLmXOzlX0AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-04-03 14:31:24
(5 months ago)
Web attack/malicious scanning detected
Web App Attack