🇫🇷
dynamix
2026-10-04 20:38:22
(8 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-01 14:37:41
(3 days ago)
Multiple WAF Violations
Web App Attack
🇩🇪
bescared
2026-09-06 02:14:02
(4 weeks ago)
F2B - Malicious activity detected. URL Probing. -151302cd-
Hacking
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-11 14:12:10
(1 month ago)
Web App Attack
2026-07-19 23:27:01
(2 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇺🇸
mnsf
2026-06-19 17:05:37
(3 months ago)
Abuse Detected (2)
Brute-Force
Web App Attack
🇷🇺
DZBOT
2026-06-09 22:24:57
(3 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 16:22:38
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 12:22:32.192978 2026] [security2:error] [pid 3917:tid 3917] [client 162.158.95.91:13890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jesusthechristministry.org"] [uri "/.env"] [unique_id "afy8SBSgud2nLu5ySSt60AAAAA4"], referer: https://www.google.com/search?q=jesusthechristministry.org
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-06 19:59:23
(4 months ago)
"GET /.git/config HTTP/2.0"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 02:57:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 22:57:34.492441 2026] [security2:error] [pid 24226:tid 24226] [client 162.158.95.91:12569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.vittariahealth.com"] [uri "/.git/config"] [unique_id "acs4Hh0EYdajQgascMN1sAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 01:40:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 21:40:52.087738 2026] [security2:error] [pid 8286:tid 8286] [client 162.158.95.91:11278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.portfoliolighting.net"] [uri "/.env.backup"] [unique_id "acsmJNCb8uIMdN9AoOTQBgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 00:02:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 20:02:36.342005 2026] [security2:error] [pid 25863:tid 25884] [client 162.158.95.91:11017] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.baronannaly.com"] [uri "/.env.development.local"] [unique_id "acsPHAF63pqZ04n3UP4dQgAAAUs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-03-30 16:06:36
(6 months ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 11:37:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 07:37:30.823478 2026] [security2:error] [pid 17137:tid 17137] [client 162.158.95.91:11583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.animatuevento.com.mx"] [uri "/.env.json"] [unique_id "acpgetxd2BBqqg0TULhX5gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 01:45:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 21:45:00.177291 2026] [security2:error] [pid 22032:tid 22032] [client 162.158.95.91:12787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.magicwok.jbaydeliveries.com"] [uri "/.env.production"] [unique_id "acnVnN1fMGTM7m_jp1zWXQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
