🇺🇸
TPI-Abuse
2026-07-16 18:11:20
(3 minutes ago)
(mod_security) mod_security (id:210492) triggered by 150.241.75.13 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 150.241.75.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 14:11:11.907392 2026] [security2:error] [pid 28286:tid 28286] [client 150.241.75.13:40306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crazypencil.com"] [uri "/src/.env"] [unique_id "alkevxPy9h4IES2NhmUywAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-16 17:53:44
(21 minutes ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇳🇱
Savvii
2026-07-16 17:43:14
(32 minutes ago)
20 attempts against mh-misbehave-ban on orcus
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 17:30:20
(44 minutes ago)
(mod_security) mod_security (id:210492) triggered by 150.241.75.13 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 150.241.75.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 13:30:12.735822 2026] [security2:error] [pid 11266:tid 11266] [client 150.241.75.13:33376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "banyonsbookdoctor.com"] [uri "/backend/.env"] [unique_id "alkVJHpBWlm9Iv8RPjwoLQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-07-16 17:25:03
(50 minutes ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 17:04:32
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 150.241.75.13 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 150.241.75.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 13:04:24.899318 2026] [security2:error] [pid 26679:tid 26679] [client 150.241.75.13:43546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "f40ph.org"] [uri "/.envrc"] [unique_id "alkPGO_D6-XMGqdDkAJU9AAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 16:47:25
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 150.241.75.13 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 150.241.75.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 12:42:55.655046 2026] [security2:error] [pid 15539:tid 15539] [client 150.241.75.13:43686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.worldcalendar.com.amybeam.com"] [uri "/.env.tmp"] [unique_id "alkKD8viJ8Hj-Zjj98De_AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 16:09:19
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 150.241.75.13 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 150.241.75.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 12:09:13.969858 2026] [security2:error] [pid 32290:tid 32290] [client 150.241.75.13:56884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wea-inc.com"] [uri "/.env.old"] [unique_id "alkCKdpia7ED7TGaDMwnxwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 15:44:58
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 150.241.75.13 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 150.241.75.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 11:44:51.195105 2026] [security2:error] [pid 11031:tid 11096] [client 150.241.75.13:44010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asrtrax.robertbellamy.com"] [uri "/.env.production"] [unique_id "alj8c95hFQKSevReNWHT9gAAAMA"]
show less
Brute-Force
Bad Web Bot
Web App Attack