🇺🇸
walnuts
2026-06-04 18:38:35
(11 hours ago)
Automated: Triggered nginx security jail (nginx-444) - probing blocked paths on web server
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 08:51:48
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 04:51:44.029274 2026] [security2:error] [pid 1419:tid 1419] [client 147.124.211.69:64816] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialstudiesforkids.com"] [uri "/.env"] [unique_id "aiE8oAYHEsuDZMFeJ5qwxQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 08:19:09
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 04:19:04.576414 2026] [security2:error] [pid 4430:tid 4457] [client 147.124.211.69:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mindgardens.com"] [uri "/.env"] [unique_id "aiE0-PfRouX67w3F1mzZtgAAANg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
MusicLibrary
2026-06-04 02:57:21
(1 day ago)
Attempted access to sensitive configuration files (.env, .git, etc.)
Bad Web Bot
Web App Attack
🇬🇧
Axel
2026-06-04 00:56:01
(1 day ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env Server: ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
apislytics
2026-06-03 19:58:08
(1 day ago)
Automatic hard ban after repeated rate-limit abuse
Brute-Force
🇹🇷
baku.hosting
2026-06-03 18:56:22
(1 day ago)
CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 147.124.211.69 (US/United Stat ...
show more
CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 147.124.211.69 (US/United States/-): 5 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 14:15:24
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:949110) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 10:15:02.478216 2026] [security2:error] [pid 4848:tid 4848] [client 147.124.211.69:54285] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "akistech.com"] [uri "/.env"] [unique_id "aiA25htEHx0PJpP5eGj_vAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 13:42:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 09:42:43.856187 2026] [security2:error] [pid 5166:tid 5166] [client 147.124.211.69:50362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greentirerecycling.com"] [uri "/.env"] [unique_id "aiAvUx7A7Pp_y8R_sQbgegAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 13:08:41
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 09:08:37.525952 2026] [security2:error] [pid 22284:tid 22284] [client 147.124.211.69:60235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starrmail.net"] [uri "/.env"] [unique_id "aiAnVWOBZ7UzxB9-KthZzwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 12:47:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 08:47:42.837216 2026] [security2:error] [pid 26205:tid 26205] [client 147.124.211.69:49827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "groomattheinn.com"] [uri "/.env"] [unique_id "aiAibpQPS-KDuEmUpprghQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 06:58:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 02:57:58.538840 2026] [security2:error] [pid 2404:tid 2404] [client 147.124.211.69:51812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aboutagingparents.com"] [uri "/.env"] [unique_id "ah_Qdln7iTh6JPXWlIb92wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
walnuts
2026-06-01 15:21:03
(3 days ago)
Automated: Triggered nginx security jail (nginx-444) - probing blocked paths on web server
Bad Web Bot
Web App Attack
🇬🇧
nigelrbfurness
2026-06-01 07:32:00
(3 days ago)
DDoS Attack
🇺🇸
TPI-Abuse
2026-06-01 06:10:40
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 147.124.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 02:10:33.790672 2026] [security2:error] [pid 3878:tid 3878] [client 147.124.211.69:52140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sansavin.com.hk"] [uri "/.env"] [unique_id "ah0iWUT-iRxE68WEzDK4igAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack