🇺🇸
TPI-Abuse
2026-06-02 11:30:07
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 07:30:00.861613 2026] [security2:error] [pid 22733:tid 22733] [client 147.93.14.26:17402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stoneageartifacts.com"] [uri "/dev/.env"] [unique_id "ah6-uML7SVzYsSE_UQFFdAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
baku.hosting
2026-06-02 10:50:04
(2 days ago)
CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 147.93.14.26 (BR/Brazil/-): 5 ...
show more
CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 147.93.14.26 (BR/Brazil/-): 5 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 08:54:54
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 04:54:46.581696 2026] [security2:error] [pid 12178:tid 12178] [client 147.93.14.26:26976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "philipjnielsen-drafting-design.com"] [uri "/core/.env"] [unique_id "ah6aVgmGNh7JpNqNLgiVDAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
securejdprop
2026-06-02 07:23:50
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 sc ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 scan 🎩 Nuclei 👨💻). Ip 147.93.14.26 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-02 07:23:49.499595461 +0000 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 07:10:16
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 03:10:13.018437 2026] [security2:error] [pid 4812:tid 4812] [client 147.93.14.26:34856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sylversheers.com"] [uri "/dev/.env"] [unique_id "ah6B1fC4ZC2lPgsARBwXDgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 06:34:45
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 02:34:39.151389 2026] [security2:error] [pid 1057:tid 1057] [client 147.93.14.26:62372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sawted.com"] [uri "/member/.env"] [unique_id "ah55fyLOwp4_dudzLaBAGAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-02 06:11:06
(2 days ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-06-02 05:52:07
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 01:52:00.616568 2026] [security2:error] [pid 2292:tid 2318] [client 147.93.14.26:64240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vote4joegardner.com"] [uri "/admin/.env"] [unique_id "ah5vgE32MPi_4VT0pEhfhAAAAVY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 05:26:48
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 01:26:42.682641 2026] [security2:error] [pid 11251:tid 11251] [client 147.93.14.26:26098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "themotelwest.com"] [uri "/member/.env"] [unique_id "ah5pkpAVDGUc9ydp5-hWDQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ecode hosting
2026-06-02 04:01:03
(2 days ago)
Domain : paksoyteknikdestek.com
Rule : env
2026-06-02 03:59:15 10.100.1.20 GET /api/.env - 443 - 147 ...
show more
Domain : paksoyteknikdestek.com
Rule : env
2026-06-02 03:59:15 10.100.1.20 GET /api/.env - 443 - 147.93.14.26 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - paksoyteknikdestek.com 206 0 0 4405 231 311 - -
show less
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-06-02 03:23:28
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 23:23:24.159530 2026] [security2:error] [pid 12430:tid 12430] [client 147.93.14.26:22932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plattlawgroup.com"] [uri "/dev/.env"] [unique_id "ah5MrDFA1wDuKTc4Bg0L7AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 02:58:18
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 22:58:13.088028 2026] [security2:error] [pid 31182:tid 31182] [client 147.93.14.26:17036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dockrockukiah.com"] [uri "/member/.env"] [unique_id "ah5GxTZASseaUv9SV311OAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 02:23:37
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 22:23:33.478346 2026] [security2:error] [pid 13604:tid 13604] [client 147.93.14.26:52602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darrinlauritzen.com"] [uri "/api/.env"] [unique_id "ah4-pdjWIElAafOWhRbzEAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 20:15:17
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 16:15:13.940568 2026] [security2:error] [pid 26492:tid 26492] [client 147.93.14.26:58304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abq4you.com"] [uri "/admin/.env"] [unique_id "ah3oUcLcJWrHRAGpZ7hxWQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 19:56:05
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.14.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 15:56:01.871733 2026] [security2:error] [pid 10600:tid 10600] [client 147.93.14.26:53786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crochetdoilies.com"] [uri "/.env"] [unique_id "ah3j0dj8pKxU6bCs8wuK1QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack