🇧🇪
madeit
2026-02-16 02:14:14
(7 months ago)
Web App Attack
🇸🇬
anotherwatcher
2026-02-16 02:05:18
(7 months ago)
bad bot
Bad Web Bot
🇹🇷
rtbh.com.tr
2026-02-15 20:11:35
(7 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
myagent.site
2026-02-15 18:30:48
(7 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇩🇪
Vegascosmetics
2026-02-14 22:50:14
(7 months ago)
Kingcopy(AI-IDS):IP does Multiple AWS Environment Abuse
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 22:31:45
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 17:31:40.771719 2026] [security2:error] [pid 8151:tid 8151] [client 165.154.244.129:57789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebronsons.com"] [uri "/.env"] [unique_id "aZD3zDVpyv_feJIZeOG9XQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
rtbh.com.tr
2026-02-14 20:11:34
(7 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
TPI-Abuse
2026-02-14 18:51:08
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 13:50:59.551841 2026] [security2:error] [pid 13471:tid 13471] [client 165.154.244.129:56701] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theateroobleck.com"] [uri "/.env"] [unique_id "aZDEE1Usov3jgId9ovifgQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-14 17:08:02
(7 months ago)
Bot / scanning and/or hacking attempts: GET /index.php HTTP/1.1, GET /.env HTTP/1.1, GET /.env.examp ...
show more
Bot / scanning and/or hacking attempts: GET /index.php HTTP/1.1, GET /.env HTTP/1.1, GET /.env.example HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 14:47:26
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 09:47:19.096433 2026] [security2:error] [pid 3403:tid 3403] [client 165.154.244.129:52735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "texaspropertyinspection.com"] [uri "/.env"] [unique_id "aZCK92ROfUB3gU6IVQpp5wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 14:27:33
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 09:27:25.563937 2026] [security2:error] [pid 17010:tid 17010] [client 165.154.244.129:61007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "testrong.com"] [uri "/.env"] [unique_id "aZCGTYXX1SpXpr_spqBgOwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 14:09:40
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 09:09:32.844184 2026] [security2:error] [pid 4899:tid 4899] [client 165.154.244.129:64402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tersch.com"] [uri "/.env"] [unique_id "aZCCHHz8u12Zp9ZV7bbCrAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 13:26:48
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 08:26:42.967167 2026] [security2:error] [pid 13312:tid 13312] [client 165.154.244.129:64447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "terfgunclub.com"] [uri "/.env"] [unique_id "aZB4EvOR4ZntJOio8NUGnwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 12:26:52
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 07:26:47.983307 2026] [security2:error] [pid 4156106:tid 4156106] [client 165.154.244.129:53328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teleplussolutions.com"] [uri "/.env"] [unique_id "aZBqBx5q-tFEKd5J0zIzdwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 05:45:42
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 165.154.244.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 00:45:29.277263 2026] [security2:error] [pid 27888:tid 27888] [client 165.154.244.129:56737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teknna.com"] [uri "/.env"] [unique_id "aZAL-QXu5FsuAVpIGDi9WAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack