🇺🇸
TPI-Abuse
2026-06-14 01:20:34
(19 minutes ago)
(mod_security) mod_security (id:210492) triggered by 199.217.98.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 199.217.98.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 21:20:26.542517 2026] [security2:error] [pid 23297:tid 23297] [client 199.217.98.168:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ccamp.dev"] [uri "/.env"] [unique_id "ai4B2ohuZDMH6RJgP9mBZwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 00:38:53
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 199.217.98.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 199.217.98.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 20:38:47.820719 2026] [security2:error] [pid 15649:tid 15649] [client 199.217.98.168:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globetechsecurities.com"] [uri "/.env"] [unique_id "ai34F_NCs8Vnjh611HMRigAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-06-13 23:19:24
(2 hours ago)
IM360 WAF: Laravel Apps Leaking Secrets exploit attempt MV:androxgh0st
Web App Attack
🇱🇻
garmtech.com
2026-06-13 23:19:23
(2 hours ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.env
Web App Attack
🇧🇷
Halux
2026-06-13 22:48:35
(2 hours ago)
199.217.98.168 Probing protected path or service
Web App Attack
🇮🇪
RoboSOC
2026-06-13 21:28:11
(4 hours ago)
phpunit Remote Code Execution Vulnerability, PTR: PTR record not found
Hacking
🇺🇸
ipblock.com
2026-06-13 20:37:00
(5 hours ago)
IPBlock protected site ID [669-fx].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Major Hostility
2026-06-13 20:05:48
(5 hours ago)
"GET /.env HTTP/1.1" 404
"GET /.env HTTP/1.1" 404
"GET /vendor/phpunit/phpunit/src/Util/PHP/eval-std ...
show more
"GET /.env HTTP/1.1" 404
"GET /.env HTTP/1.1" 404
"GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404
show less
Web App Attack
🇺🇸
interbiznw.com
2026-06-13 19:49:02
(5 hours ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 19:29:06
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 199.217.98.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 199.217.98.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 15:29:00.551708 2026] [security2:error] [pid 17346:tid 17346] [client 199.217.98.168:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "totalsafe-security.com"] [uri "/.env"] [unique_id "ai2vfCV341Cxw6o_IFo62wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Jimbo67
2026-06-13 18:40:15
(6 hours ago)
Cloudflare WAF: 1 hits in 300s | action=block | abuse=scanner | categories=Bad Web Bot | rule_id=a83 ...
show more
Cloudflare WAF: 1 hits in 300s | action=block | abuse=scanner | categories=Bad Web Bot | rule_id=a8325d956f104d2194269f1386e09ef1 | URIs=/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | confidence=0.75
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-13 18:16:51
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 199.217.98.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 199.217.98.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 14:16:45.627728 2026] [security2:error] [pid 6734:tid 6734] [client 199.217.98.168:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nyemdr-online.com"] [uri "/.env"] [unique_id "ai2ejdxRMr9e6-NRHIOBrwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
MatStef132
2026-06-13 16:12:01
(9 hours ago)
MatShield L7: blocked on mathost.eu (automation-ua)
DDoS Attack
🇩🇪
expandmade.com
2026-06-13 15:59:03
(9 hours ago)
trolling for installation vulnerabilities [13/Jun/2026:15:59:03 "GET /.env"]
Web App Attack
🇩🇪
bryth
2026-06-13 14:50:12
(10 hours ago)
Wordpress login/xmlrpc abuse (Sat Jun 13 02:33:05 PM UTC 2026)
Hacking
Web App Attack