🇵🇹
PT
2026-07-20 13:06:00
(4 days ago)
web app attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 16:30:14
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 12:29:56.268058 2026] [security2:error] [pid 30602:tid 30602] [client 170.124.32.151:56683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hanabritgermanshepherds.com"] [uri "/.env.prod"] [unique_id "akvYBEe-o-doGTaXDUQOnAAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 10:27:46
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 06:27:32.422221 2026] [security2:error] [pid 29673:tid 29673] [client 170.124.32.151:49403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fiyaplatform.com"] [uri "/.env.prod.local"] [unique_id "akuDFCfPGRpwtBOakGnZmQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-07-06 10:19:29
(2 weeks ago)
Accessed trap at '/.env'
Web App Attack
2026-07-06 00:35:57
(2 weeks ago)
SQL Injection
SQL Injection
🇺🇸
TPI-Abuse
2026-07-05 23:17:33
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 19:17:06.569586 2026] [security2:error] [pid 14471:tid 14471] [client 170.124.32.151:52813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coffeewitheinstein.com"] [uri "/.env.stage"] [unique_id "akrl8tR58CwdY2_kn2c5uAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
conseilgouz
2026-07-05 22:57:37
(2 weeks ago)
upe-12 : Block return, carriage return, ... characters=>/index.php?option=com_content&view=artic ...
show more
upe-12 : Block return, carriage return, ... characters=>/index.php?option=com_content&view=article&id=43%27&catid=8100%100%CRITICAL(')
show less
Hacking
🇺🇸
TPI-Abuse
2026-07-05 21:53:26
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 17:53:06.159620 2026] [security2:error] [pid 13218:tid 13218] [client 170.124.32.151:40311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "verenacastle.com"] [uri "/.env.bak"] [unique_id "akrSQiYr0hiM88I3DUIJOwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
bcsaba
2026-07-05 21:46:08
(2 weeks ago)
Looking for phpmyadmin
170.124.32.151 - - [05/Jul/2026:23:45:59 +0200] "GET /phpmyadmin2/ HTTP/2.0" ...
show more
Looking for phpmyadmin
170.124.32.151 - - [05/Jul/2026:23:45:59 +0200] "GET /phpmyadmin2/ HTTP/2.0" 404 1487 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 21:20:32
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 17:20:25.343563 2026] [security2:error] [pid 7750:tid 7773] [client 170.124.32.151:42221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aafm.us"] [uri "/.env"] [unique_id "akrKmdspEmWrGSDPYLC8UwAAAQs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
RidgeStar
2026-07-05 21:02:22
(2 weeks ago)
2026-07-05T13:20:02-07:00: 12'"><script>alert(68752)</script>
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-07-05 20:54:57
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 16:54:44.124600 2026] [security2:error] [pid 1861:tid 1861] [client 170.124.32.151:41317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "phuket-boatcharter.com"] [uri "/.env.production"] [unique_id "akrElLJULvZvWQ7EQlHHMwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-05 20:48:52
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 20:25:22
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 16:25:02.925291 2026] [security2:error] [pid 8230:tid 8230] [client 170.124.32.151:45533] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.christineohlman.net"] [uri "/.env.dev.local"] [unique_id "akq9ntFu6lpH4GeZj3UivQAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-07-05 20:24:45
(2 weeks ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 170.124.32.151 (US/United States/-): ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 170.124.32.151 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack