🇮🇹
Progetto1
2026-09-21 08:45:02
(30 minutes ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇬🇧
consul.to
2026-09-21 05:14:31
(4 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 04:35:10
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 00:35:02.243889 2026] [security2:error] [pid 14979:tid 14979] [client 196.119.227.196:51445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anthonyjoseph.us"] [uri "/.env"] [unique_id "arCz9pBW4rjsusEVLSjRGgAAAD4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 04:12:36
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 00:12:30.355025 2026] [security2:error] [pid 11636:tid 11636] [client 196.119.227.196:63296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ankrum.us"] [uri "/.env"] [unique_id "arCurkEs_RBIqlWBofUrCQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 00:10:36
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 20:10:32.392917 2026] [security2:error] [pid 15280:tid 15280] [client 196.119.227.196:55491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alosi.us"] [uri "/.env"] [unique_id "arB1-JYhBUwu_3_aXhguCQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Jochen Pretli
2026-09-20 23:04:09
(10 hours ago)
connection to honeypot
Email Spam
Port Scan
🇺🇸
TPI-Abuse
2026-09-20 22:20:27
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 18:20:22.797416 2026] [security2:error] [pid 1591:tid 1591] [client 196.119.227.196:54204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aldrich.us"] [uri "/.env"] [unique_id "arBcJhxG9YYP9wZ0gEJb7AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 16:15:21
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 12:15:14.592718 2026] [security2:error] [pid 18984:tid 18984] [client 196.119.227.196:57793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aden.us"] [uri "/.env"] [unique_id "arAGkge0e2z2jxhNfzZoPgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 15:50:26
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 11:50:18.873468 2026] [security2:error] [pid 5164:tid 5164] [client 196.119.227.196:49708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acworthga.us"] [uri "/.env"] [unique_id "arAAuhmG_jd9-GvMGP51WQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 13:17:54
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:17:48.068001 2026] [security2:error] [pid 2329:tid 2426] [client 196.119.227.196:62205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aafm.us"] [uri "/.env"] [unique_id "aq_c_DdyK-Ux5y4A6Nx51QAAAgQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 11:14:10
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 07:14:06.105479 2026] [security2:error] [pid 20355:tid 20355] [client 196.119.227.196:50312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "929.us"] [uri "/.env"] [unique_id "aq-__mTJicoLjRekmaM75wAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 21:53:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 17:53:21.304990 2026] [security2:error] [pid 28856:tid 28856] [client 196.119.227.196:64932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3905ccn.us"] [uri "/.env"] [unique_id "aq8EURAk3dxqWlQpGRyW0AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-09-19 18:27:50
(1 day ago)
196.119.227.196 - - [19/Sep/2026:14:27:45 -0400] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Wind ...
show more
196.119.227.196 - - [19/Sep/2026:14:27:45 -0400] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
196.119.227.196 - - [19/Sep/2026:14:27:47 -0400] "GET /.env HTTP/1.1" 403 5318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
196.119.227.196 - - [19/Sep/2026:14:27:49 -0400] "GET /.env HTTP/1.1" 403 5318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 14:56:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.227.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 10:56:08.659863 2026] [security2:error] [pid 10318:tid 10372] [client 196.119.227.196:63345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "12am.us"] [uri "/.env"] [unique_id "aq6iiJdurP5Gv-ELWKSbHQAAAVU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
mateus.vicente
2026-09-19 09:31:09
(1 day ago)
[2026-09-19T09:31:09Z] Requests to sensitive Apache endpoints and path traversal patterns. (srv-app)
Brute-Force
Bad Web Bot
Web App Attack
