🇩🇪
BlueWire Hosting
2026-06-19 12:55:39
(1 hour ago)
Bad bot ignoring robot.txt
Bad Web Bot
2026-06-19 00:01:12
(14 hours ago)
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 18:15:26
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 14:15:19.060330 2026] [security2:error] [pid 30636:tid 30636] [client 194.62.107.9:61011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bnaiisraelkearny.com"] [uri "/.env"] [unique_id "ajQ1t9NqRNqeKZGMLwKkyQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
internetworld
2026-06-18 17:50:12
(20 hours ago)
internetworld-prod-01 Fail2Ban ban. Jail=nginx-web-probe-iw. Sanitized automatic report from interne ...
show more
internetworld-prod-01 Fail2Ban ban. Jail=nginx-web-probe-iw. Sanitized automatic report from internetworld.ca server security monitoring.
show less
Brute-Force
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-06-18 14:07:02
(1 day ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [mx02,wa02]
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 13:20:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 09:20:47.650922 2026] [security2:error] [pid 22276:tid 22276] [client 194.62.107.9:34927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wmodradio.com"] [uri "/.env"] [unique_id "ajPwr1X_5a_CDDiT4NPIVwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-06-18 13:09:02
(1 day ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [mx01,mx03,wa01]
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 12:34:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 08:34:00.422375 2026] [security2:error] [pid 15447:tid 15447] [client 194.62.107.9:32167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gescosigns.com"] [uri "/.env"] [unique_id "ajPluBdsVHBZC2zS3cO8VwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 10:57:05
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 06:56:59.229724 2026] [security2:error] [pid 22177:tid 22177] [client 194.62.107.9:37965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heytechiesshow.com"] [uri "/.env"] [unique_id "ajPO--PAMY0IbQZiUCmnJAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-06-18 10:31:18
(1 day ago)
Probing websites for vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 09:08:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 05:08:01.460617 2026] [security2:error] [pid 31579:tid 31579] [client 194.62.107.9:24309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kentuckyminiaturehorsebreeders.org"] [uri "/.env"] [unique_id "ajO1cWNHaAkCZG0y4g1AeAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 07:30:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 03:30:23.994081 2026] [security2:error] [pid 23607:tid 23620] [client 194.62.107.9:45091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dulemba.com"] [uri "/.env"] [unique_id "ajOej9qb6fT4hFs1Jfg1JgAAAYs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-06-18 06:42:20
(1 day ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 06:05:13
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 02:05:08.845318 2026] [security2:error] [pid 15950:tid 15950] [client 194.62.107.9:44859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infraredovens.net"] [uri "/.env"] [unique_id "ajOKlL3pmbxQYsJmAIFWEgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 05:18:34
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 01:18:26.922718 2026] [security2:error] [pid 29153:tid 29153] [client 194.62.107.9:63209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.segeln-in-phuket.com"] [uri "/.env"] [unique_id "ajN_osJ5VIJXwo5qZ-TO0QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack