🇹🇷
Threat.live
2026-05-19 09:35:08
UTC ·
(5 months ago)
Suspicious Connection Attempts
Brute-Force
🇺🇸
TPI-Abuse
2026-05-06 17:33:29
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 167.88.166.239 (239.166.88.167.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 13:33:23.070301 2026] [security2:error] [pid 22485:tid 2248 ...
show more
(mod_security) mod_security (id:210492) triggered by 167.88.166.239 (239.166.88.167.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 13:33:23.070301 2026] [security2:error] [pid 22485:tid 22485] [client 167.88.166.239:56116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "babycatkhalil.com"] [uri "/.env"] [unique_id "aft7Y9hhoDjEbAhv0n-40QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-06 13:52:44
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2002:a758:a6ef::a758:a6ef (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 09:52:38.048052 2026] [security2:error] [pid 12534:tid 12534] [client 2002 ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:a758:a6ef::a758:a6ef (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 09:52:38.048052 2026] [security2:error] [pid 12534:tid 12534] [client 2002:a758:a6ef::a758:a6ef:49323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bencramerinc.com"] [uri "/.env"] [unique_id "aftHpsVG4zivIX0chhFO6QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-06 13:27:47
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 167.88.166.239 (239.166.88.167.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 09:27:41.897025 2026] [security2:error] [pid 23612:tid 2361 ...
show more
(mod_security) mod_security (id:210492) triggered by 167.88.166.239 (239.166.88.167.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 09:27:41.897025 2026] [security2:error] [pid 23612:tid 23612] [client 167.88.166.239:61364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dualspiralsystems.com"] [uri "/.env"] [unique_id "aftBzYwHmImkZC_r5vQQlQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-06 12:25:22
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2002:a758:a6ef::a758:a6ef (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 08:25:19.117043 2026] [security2:error] [pid 15789:tid 15789] [client 2002 ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:a758:a6ef::a758:a6ef (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 08:25:19.117043 2026] [security2:error] [pid 15789:tid 15789] [client 2002:a758:a6ef::a758:a6ef:61482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "charityholidaycards.com"] [uri "/.env"] [unique_id "afszLwsO5BYAK-JLTFoOYQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-06 11:10:39
UTC ·
(6 months ago)
167.88.166.239 - - [06/May/2026:19:10:38 +0800] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
...
Bad Web Bot
Web App Attack
🇩🇪
gadix
2026-05-06 10:09:57
UTC ·
(6 months ago)
[06/May/2026:12:09:40.342569 +0200] afsTZLS6iPbpKmT2gU2MhwAAAFU 167.88.166.239 35372 127.0.0.1 7081
[06/May/2026:12:09:49.125643 +0200] afsTbbS6iPbpKmT2gU2MiQAAAE8 167.88.166.239 35392 127.0.0.1 7081
[06/May/2026:12:09:53.268225 +0200] afsTccNcqOjtME ...
show more
[06/May/2026:12:09:40.342569 +0200] afsTZLS6iPbpKmT2gU2MhwAAAFU 167.88.166.239 35372 127.0.0.1 7081
[06/May/2026:12:09:49.125643 +0200] afsTbbS6iPbpKmT2gU2MiQAAAE8 167.88.166.239 35392 127.0.0.1 7081
[06/May/2026:12:09:53.268225 +0200] afsTccNcqOjtMENshwicRwAAAA8 167.88.166.239 57146 127.0.0.1 7081
...
show less
Web App Attack
2026-05-06 10:04:57
UTC ·
(6 months ago)
(mod_security) mod_security triggered on hostname [redacted] 167.88.166.239 (US/United States/239.166.88.167.static.cloudzy.com)
SQL Injection
🇺🇸
TPI-Abuse
2026-05-06 09:57:53
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 167.88.166.239 (239.166.88.167.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 05:57:48.810082 2026] [security2:error] [pid 22270:tid 2227 ...
show more
(mod_security) mod_security (id:210492) triggered by 167.88.166.239 (239.166.88.167.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 05:57:48.810082 2026] [security2:error] [pid 22270:tid 22270] [client 167.88.166.239:62521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jan-wilson.com"] [uri "/.env"] [unique_id "afsQnBW3XoHKkFyKO5x6qwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-06 08:19:31
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 167.88.166.239 (239.166.88.167.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 04:19:24.267471 2026] [security2:error] [pid 31291:tid 3129 ...
show more
(mod_security) mod_security (id:210492) triggered by 167.88.166.239 (239.166.88.167.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 04:19:24.267471 2026] [security2:error] [pid 31291:tid 31291] [client 167.88.166.239:58976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radtraininginc.net"] [uri "/.env"] [unique_id "afr5jOcPgtkKAJ21pMknPQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-06 06:41:24
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 167.88.166.239 (239.166.88.167.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 02:41:18.395053 2026] [security2:error] [pid 23467:tid 2347 ...
show more
(mod_security) mod_security (id:210492) triggered by 167.88.166.239 (239.166.88.167.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 02:41:18.395053 2026] [security2:error] [pid 23467:tid 23479] [client 167.88.166.239:56986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "letterstomyhusband.com"] [uri "/.env"] [unique_id "afrijuxqLDc7kbdhHpKojgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-06 06:09:05
UTC ·
(6 months ago)
Bot / scanning and/or hacking attempts: POST / HTTP/1.1, GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1., GET /assets/.env HTTP/1.1, GET /storage/.env HTTP/1.1, GET /.env HTTP/1.1
Hacking
Web App Attack
🇨🇦
Mediashaker
2026-05-06 05:39:31
UTC ·
(6 months ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 167.88.166.239 (US/United States/239.166.88.167.static.cloudzy.com)
Port Scan
🇺🇸
TPI-Abuse
2026-05-06 05:17:02
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 167.88.166.239 (239.166.88.167.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 01:16:55.519399 2026] [security2:error] [pid 7041:tid 7041] ...
show more
(mod_security) mod_security (id:210492) triggered by 167.88.166.239 (239.166.88.167.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 01:16:55.519399 2026] [security2:error] [pid 7041:tid 7041] [client 167.88.166.239:52499] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barreda.org"] [uri "/.env"] [unique_id "afrOx-SWsSa5ph6j7XuKUQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
RoboSOC
2026-05-06 04:59:07
UTC ·
(6 months ago)
phpunit Remote Code Execution Vulnerability, PTR: 239.166.88.167.static.cloudzy.com.
Hacking