🇺🇸
TPI-Abuse
2026-10-19 22:44:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): ...
show more
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 18:44:42.559831 2026] [security2:error] [pid 32483:tid 32483] [client 179.188.50.199:57726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "corepest.com"] [uri "/.env"] [unique_id "atadWnNOainuq7Rm55lzqwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 20:09:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): ...
show more
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 16:09:40.353927 2026] [security2:error] [pid 3656:tid 3656] [client 179.188.50.199:42282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wilcoxlawllc.com"] [uri "/.env"] [unique_id "atZ5BOTmi8UsNIjmxHQflwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 18:28:17
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): ...
show more
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 14:28:12.363452 2026] [security2:error] [pid 31711:tid 31711] [client 179.188.50.199:35922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jenricker.com"] [uri "/.env"] [unique_id "atZhPJtPeFjHnE4tVM1i6AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 16:46:02
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): ...
show more
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 12:45:57.187169 2026] [security2:error] [pid 2192:tid 2192] [client 179.188.50.199:38394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ballantinepainting.com"] [uri "/.env"] [unique_id "atZJRTxhPCh-bUP3i8AFPwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 13:22:02
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): ...
show more
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 09:21:56.600166 2026] [security2:error] [pid 20703:tid 20703] [client 179.188.50.199:42058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lacycustombuilt.com"] [uri "/.env"] [unique_id "atYZdAVqIvsFxOUOdKAP8AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 12:29:09
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): ...
show more
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 08:29:02.019694 2026] [security2:error] [pid 16213:tid 16213] [client 179.188.50.199:58956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trapper.biz"] [uri "/.env"] [unique_id "atYNDtcxCPFacDdV35MoQgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 11:13:06
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): ...
show more
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 07:12:59.297730 2026] [security2:error] [pid 8901:tid 8901] [client 179.188.50.199:45590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atheismz.com"] [uri "/.env"] [unique_id "atX7O3XWDM-bCCI4brd6lwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 09:39:26
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): ...
show more
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 05:39:21.431503 2026] [security2:error] [pid 21893:tid 21893] [client 179.188.50.199:52192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marionenv.com"] [uri "/.env"] [unique_id "atXlSckLaqCBDT3zZhESxgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 09:03:14
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): ...
show more
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 05:03:08.545766 2026] [security2:error] [pid 12214:tid 12214] [client 179.188.50.199:51938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "illumoonatedtarot.com"] [uri "/.env"] [unique_id "atXczDwxDH0AIxYm1Yr_UwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 08:18:27
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): ...
show more
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 04:18:24.404470 2026] [security2:error] [pid 19866:tid 19866] [client 179.188.50.199:56636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "surviquo.com"] [uri "/.env"] [unique_id "atXSUEPaCpQoa-uxRevXigAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 07:51:48
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): ...
show more
(mod_security) mod_security (id:210492) triggered by 179.188.50.199 (l70cnn0866.publiccloud.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 03:51:45.157956 2026] [security2:error] [pid 28936:tid 28936] [client 179.188.50.199:56464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "raaksystems.com"] [uri "/.env"] [unique_id "atXMEZU__Q5O3lATUey_4wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-19 02:46:01
(3 days ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
🇬🇧
myintarweb
2026-10-18 04:54:03
(4 days ago)
179.188.50.199 - - [18/Oct/2026:05:54:03 +0100] 80 "GET /parker-pictures.co.uk.zip HTTP/1.1" 303 161 ...
show more
179.188.50.199 - - [18/Oct/2026:05:54:03 +0100] 80 "GET /parker-pictures.co.uk.zip HTTP/1.1" 303 1616 "-" "-"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
[email protected]
2026-10-09 15:11:43
(1 week ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-10-09T15:11:43Z
Brute-Force
🇺🇸
[email protected]
2026-10-09 10:51:55
(1 week ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-10-09T10:51:55Z
Brute-Force