🇺🇦
URAN Publishing Service
2026-06-19 15:39:12
(3 weeks ago)
143.198.127.175 - - [19/Jun/2026:18:38:57 +0300] "GET /.env HTTP/1.1" 404 4746 "-" "Mozilla/5.0 (Win ...
show more
143.198.127.175 - - [19/Jun/2026:18:38:57 +0300] "GET /.env HTTP/1.1" 404 4746 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
143.198.127.175 - - [19/Jun/2026:18:39:10 +0300] "GET /_profiler/open?file=.env HTTP/1.1" 404 4745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 14:52:38
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 143.198.127.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 143.198.127.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 10:52:32.820606 2026] [security2:error] [pid 23022:tid 23022] [client 143.198.127.175:45102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "csm-dtc.com"] [uri "/.env"] [unique_id "ajVXsIzcE95viiOCP9-RhQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-06-19 14:40:20
(3 weeks ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 19:51:23
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 143.198.127.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 143.198.127.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 15:51:17.917691 2026] [security2:error] [pid 25770:tid 25786] [client 143.198.127.175:36754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boracayglobal.org"] [uri "/.env"] [unique_id "ajRMNRrVGN1abdCZY06EAgAAAMg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 17:28:11
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 143.198.127.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 143.198.127.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 13:28:05.547730 2026] [security2:error] [pid 18149:tid 18149] [client 143.198.127.175:48874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bookingsouthafrica.com"] [uri "/.env"] [unique_id "ajQqpU8DM8_HuscXWy8dPQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-18 13:05:11
(3 weeks ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2026-06-18 12:03:35
(3 weeks ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 07:48:21
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 143.198.127.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 143.198.127.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 03:48:16.238011 2026] [security2:error] [pid 1199:tid 1199] [client 143.198.127.175:41030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bluebirds.bickleton.org"] [uri "/.env"] [unique_id "ajOiwBxTHVFNbCXNpTF7gQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-06-17 17:05:27
(3 weeks ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
2026-06-17 04:05:02
(3 weeks ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 03:53:14
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 143.198.127.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 143.198.127.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 23:53:09.196265 2026] [security2:error] [pid 6404:tid 6404] [client 143.198.127.175:39040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afjm.info.afjm.net"] [uri "/.env"] [unique_id "ajIaJUBwTgA2NonzDt7b6AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-16 22:03:47
(3 weeks ago)
Auto-ban: >3000 req/min op 2026-06-16
Web App Attack
SSH
Hacking
🇩🇪
ANDREAS LYTOS
2022-07-17 13:13:04
(3 years ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 143.198.127.175 (US/ ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 143.198.127.175 (US/United States/-)
show less
Bad Web Bot
🇱🇹
EIC
2022-07-17 12:45:17
(3 years ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 143.198.127.175 (US/ ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 143.198.127.175 (US/United States/-)
show less
Bad Web Bot
2022-07-17 12:09:16
(3 years ago)
(apache-useragents,mod_security) Login failure/trigger from 143.198.127.175 (US/United States/-)
SQL Injection
Bad Web Bot