🇹🇷
rtbh.com.tr
2026-03-15 20:12:04
(3 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2026-03-14 20:12:03
(3 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
TPI-Abuse
2026-03-13 18:22:47
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 191.96.67.187 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 191.96.67.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 14:22:40.873100 2026] [security2:error] [pid 1617:tid 1617] [client 191.96.67.187:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perl-photo.com"] [uri "/.env"] [unique_id "abRV8P0Fwx3JfJ9sXiJdPgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ambor
2026-03-13 17:45:18
(3 months ago)
Honeypot access: Environment file access attempt. Path: /.env
Web App Attack
🇺🇸
dtorrer
2026-03-13 17:22:57
(3 months ago)
General vulnerability scan.
Port Scan
🇺🇸
TPI-Abuse
2026-03-13 17:07:40
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 191.96.67.187 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 191.96.67.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 13:07:11.509161 2026] [security2:error] [pid 9013:tid 9013] [client 191.96.67.187:16062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "floridausa.com"] [uri "/8news/.env"] [unique_id "abREP5BDG2nHIlfxMgDgVwAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-03-13 17:01:09
(3 months ago)
[redacted] 191.96.67.187 - - [13/Mar/2026:18:01:05 +0100] "GET /.env HTTP/2.0" 301 286 "-" "Mozilla/ ...
show more
[redacted] 191.96.67.187 - - [13/Mar/2026:18:01:05 +0100] "GET /.env HTTP/2.0" 301 286 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" [redacted] 191.96.67.187 - - [13/Mar/2026:18:01:06 +0100] "GET /fr/.env/ HTTP/2.0" 404 25571 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Bad Web Bot
Web App Attack
🇵🇱
Kitki30.com
2026-03-13 17:00:44
(3 months ago)
HTTP Probing. Log: 191.96.67.187 - - [13/Mar/2026:18:00:43 +0100] "GET /.env HTTP/1.1" 301 162 "-" " ...
show more
HTTP Probing. Log: 191.96.67.187 - - [13/Mar/2026:18:00:43 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-03-13 16:50:11
(3 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-03-13 16:40:53
(3 months ago)
2026/03/13 17:40:52 [error] 14118#170239: *4363579 access forbidden by rule, client: 191.96.67.187, ...
show more
2026/03/13 17:40:52 [error] 14118#170239: *4363579 access forbidden by rule, client: 191.96.67.187, server: karolyimusic.com, request: "GET /.env HTTP/1.1", host: "karolyimusic.com"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-03-13 16:24:42
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 191.96.67.187 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 191.96.67.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 12:24:30.169913 2026] [security2:error] [pid 31257:tid 31267] [client 191.96.67.187:43003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perspectivedesigninc.com"] [uri "/.env"] [unique_id "abQ6Pi2M3SB1gu5vk853yAAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dklueh79
2026-03-13 16:08:21
(3 months ago)
Probe for vulnerabilities. Path attempted: /.env
Web App Attack
🇺🇸
interbiznw.com
2026-03-13 16:00:06
(3 months ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇬🇧
Aetherweb Ark
2026-03-13 15:58:31
(3 months ago)
(mod_security) mod_security (id:949110) triggered by 191.96.67.187 (US/United States/-): N in the la ...
show more
(mod_security) mod_security (id:949110) triggered by 191.96.67.187 (US/United States/-): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-03-13 15:37:13
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 191.96.67.187 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 191.96.67.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 11:37:07.355699 2026] [security2:error] [pid 30428:tid 30428] [client 191.96.67.187:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "365soft.top"] [uri "/.env"] [unique_id "abQvI6-ZS9Bbqh0ahlORZgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack