🇺🇸
TPI-Abuse
2026-06-15 02:58:05
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:57:59.719488 2026] [security2:error] [pid 18674:tid 18674] [client 167.71.225.178:49328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.wildimaginings.org"] [uri "/.env"] [unique_id "ai9qN9AN1PDDDdvzmLMB6QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 02:26:03
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:25:59.972807 2026] [security2:error] [pid 13274:tid 13274] [client 167.71.225.178:46410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.wa211.org"] [uri "/.env"] [unique_id "ai9itxENeCixAfjC1veIyQAAAHo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 01:49:52
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:49:48.643948 2026] [security2:error] [pid 23171:tid 23171] [client 167.71.225.178:37872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.usefulendeavors.org"] [uri "/.env"] [unique_id "ai9aPAYfG5fu4euzDQwrrAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 01:03:31
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:03:24.139043 2026] [security2:error] [pid 13033:tid 13033] [client 167.71.225.178:59540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.towida.org"] [uri "/.env"] [unique_id "ai9PXOWJ1gyHyzsRGhigUQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 00:43:57
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:43:54.441363 2026] [security2:error] [pid 20251:tid 20251] [client 167.71.225.178:55122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thoughtage.org"] [uri "/.env"] [unique_id "ai9KykrZXddZF7Fm2Qpc0QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 00:14:18
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:14:14.057296 2026] [security2:error] [pid 16768:tid 16768] [client 167.71.225.178:40030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.texassportsmansassociation.org"] [uri "/.env"] [unique_id "ai9D1qNYD4sLafqehuRjPQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-06-15 00:08:08
(12 hours ago)
167.71.225.178 - - [15/Jun/2026:01:08:07 +0100] "GET /roundcube/users/sign_in HTTP/1.1" 404 548 "htt ...
show more
167.71.225.178 - - [15/Jun/2026:01:08:07 +0100] "GET /roundcube/users/sign_in HTTP/1.1" 404 548 "https://webmail.templo3kayas.org/users/sign_in" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0"
show less
Bad Web Bot
🇩🇪
Ba-Yu
2026-06-14 05:48:33
(1 day ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
2026-06-14 05:45:32
(1 day ago)
WEB attack
Brute-Force
🇨🇭
TheCoon
2026-06-14 03:15:02
(1 day ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇧🇪
voormedia
2026-06-13 22:50:28
(1 day ago)
Accessed trap at '/.env'
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 18:18:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 14:18:39.446518 2026] [security2:error] [pid 16671:tid 16671] [client 167.71.225.178:42042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kdgsf.xyz"] [uri "/.env"] [unique_id "ai2e_4Ow6XoEkfMpEcLSFQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 06:33:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 167.71.225.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:33:44.449628 2026] [security2:error] [pid 28237:tid 28237] [client 167.71.225.178:49510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dodojuice.com"] [uri "/.env"] [unique_id "aiz5yMKCigaLnaz2ptmr2AAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-06-13 02:16:19
(2 days ago)
Domain : hortyfruta.es
Rule : env
2026-06-13 02:13:42 ***hidden-privacy*** GET /.env - 443 - 167.71. ...
show more
Domain : hortyfruta.es
Rule : env
2026-06-13 02:13:42 ***hidden-privacy*** GET /.env - 443 - 167.71.225.178 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0 - hortyfruta.es 301 0 0 461 205 151 - -
show less
Hacking
SQL Injection
2026-06-12 05:05:22
(3 days ago)
Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=8
Hacking