๐บ๐ธ
TPI-Abuse
2026-10-13 10:12:52
(57 seconds ago)
(mod_security) mod_security (id:210492) triggered by 168.144.160.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 168.144.160.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 06:12:46.895875 2026] [security2:error] [pid 26033:tid 26033] [client 168.144.160.38:15430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bbc.my1611.com"] [uri "/.env"] [unique_id "as4EHolBT7r7cD_VGRy8DAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-10-13 09:57:19
(16 minutes ago)
(mod_security) mod_security (id:949110) triggered by 168.144.160.38 (US/United States/-): N in the l ...
show more
(mod_security) mod_security (id:949110) triggered by 168.144.160.38 (US/United States/-): N in the last X secs
show less
Web App Attack
๐บ๐ธ
interbiznw.com
2026-10-13 09:52:11
(21 minutes ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
๐ซ๐ฎ
YF
2026-10-13 09:30:57
(42 minutes ago)
Environment file probe
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 08:45:34
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 168.144.160.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 168.144.160.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 04:45:26.230516 2026] [security2:error] [pid 22028:tid 22028] [client 168.144.160.38:7246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bastardesign.com"] [uri "/.env"] [unique_id "as3vpvzO3d65iGfzQsGoAwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
IVski.com
2026-10-13 08:18:13
(1 hour ago)
IVski WAF | Sensitive file probe - looking for exposed .env
Hacking
Brute-Force
Web App Attack
๐ช๐ธ
Francisco Vallejo
2026-10-13 07:42:42
(2 hours ago)
[Tue Oct 13 09:42:41.023254 2026] [core:info] [pid 423287:tid 423325] [client 168.144.160.38:36326] ...
show more
[Tue Oct 13 09:42:41.023254 2026] [core:info] [pid 423287:tid 423325] [client 168.144.160.38:36326] AH00128: File does not exist: /var/www/barluna/wp
[Tue Oct 13 09:42:41.262932 2026] [core:info] [pid 423287:tid 423357] [client 168.144.160.38:36342] AH00128: File does not exist: /var/www/barluna/vendor/laravel-filemanager/js/script.js
[Tue Oct 13 09:42:41.446931 2026] [core:info] [pid 423287:tid 423343] [client 168.144.160.38:36326] AH00128: File does not exist: /var/www/barluna/wordpress
[Tue Oct 13 09:42:41.464881 2026] [core:info] [pid 423287:tid 423323] [client 168.144.160.38:36382] AH00128: File does not exist: /var/www/barluna/new
[Tue Oct 13 09:42:41.466086 2026] [core:info] [pid 423286:tid 423291] [client 168.144.160.38:36360] AH00128: File does not exist: /var/www/barluna/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
...
show less
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-10-13 07:38:43
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 168.144.160.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 168.144.160.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 03:38:36.322880 2026] [security2:error] [pid 7028:tid 7028] [client 168.144.160.38:26266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.barkdull.org"] [uri "/.env"] [unique_id "as3f_AXKL_j68rl-0bl7FgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
sdos.es
2026-10-13 07:17:55
(2 hours ago)
"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-10-13 07:11:09
(3 hours ago)
excessive HTTP 404 errors
Bad Web Bot
๐ฌ๐ง
AvonleaConsulting
2026-10-13 07:00:15
(3 hours ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
๐ซ๐ท
[email protected]
2026-10-13 06:50:22
(3 hours ago)
PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (Abuse ...
show more
PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (AbuseIPDB score: 100% (cached))
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 06:33:36
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 168.144.160.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 168.144.160.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 02:33:32.775559 2026] [security2:error] [pid 22105:tid 22105] [client 168.144.160.38:32448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bankcardtexas.com"] [uri "/.env"] [unique_id "as3QvK9HV4vpxgg5RmhADwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
pm33
2026-10-13 06:16:29
(3 hours ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 06:01:50
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 168.144.160.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 168.144.160.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 02:01:43.066926 2026] [security2:error] [pid 24976:tid 24976] [client 168.144.160.38:38992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bamedica.com"] [uri "/.env"] [unique_id "as3JR8VSqgJDrs4cU_66MgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack