2026-11-14 12:06:31
UTC ·
(9 hours ago)
[ssd5.kdns.gr] httpd-config-scan: sites=bamhairsalon.gr; logs=/var/log/httpd/domains/bamhairsalon.gr.log; samples=/.env | fast_lane=true kernel_at=2026-11-14T12:04:35+00:00 | requests=1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 09:33:55
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:33:40.445579 2026] [security2:error] [pid 22168:tid 22168] [client 209.99.185.117:0] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:33:40.445579 2026] [security2:error] [pid 22168:tid 22168] [client 209.99.185.117:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kidswithcamerasmovie.com"] [uri "/.env"] [unique_id "avgq9HWovxPqMnL5rMieGAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 02:28:36
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:28:19.321461 2026] [security2:error] [pid 473727:tid 473727] [client 209.99.185.117:5183 ...
show more
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:28:19.321461 2026] [security2:error] [pid 473727:tid 473727] [client 209.99.185.117:51835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caschettaconsulting.com"] [uri "/.env"] [unique_id "avfHQ78FVDflka0APfVIDwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2026-11-13 23:50:02
UTC ·
(21 hours ago)
Cloudflare WAF: Request Path: /.env Request Query: Host: elhacker.net userAgent: Action: block Source: firewallCustom ASN Description: SKN Subnet & Telecom Ltd Country: CH Method: GET Timestamp: 2026-11-13T23:50:02Z ruleId: 6b2d48d0415e4adb9f099d85 ...
show more
Cloudflare WAF: Request Path: /.env Request Query: Host: elhacker.net userAgent: Action: block Source: firewallCustom ASN Description: SKN Subnet & Telecom Ltd Country: CH Method: GET Timestamp: 2026-11-13T23:50:02Z ruleId: 6b2d48d0415e4adb9f099d85f54d1de6.
show less
Hacking
SQL Injection
Web App Attack
🇹🇷
cagatayakinci.com
2026-11-13 22:06:42
UTC ·
(23 hours ago)
2026-11-14T01:06:41.340990+03:00 mail dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 5 secs): user=<[email protected] >, method=PLAIN, rip=209.99.185.117, lip=192.168.1.80, TLS, session=<tepQpC9gmcb ...
show more
2026-11-14T01:06:41.340990+03:00 mail dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 5 secs): user=<[email protected] >, method=PLAIN, rip=209.99.185.117, lip=192.168.1.80, TLS, session=<tepQpC9gmcbRY7l1>
...
show less
Brute-Force
Email Spam
🇺🇸
TPI-Abuse
2026-11-13 17:15:56
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 12:15:41.171377 2026] [security2:error] [pid 15858:tid 15858] [client 209.99.185.117:63487] ...
show more
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 12:15:41.171377 2026] [security2:error] [pid 15858:tid 15858] [client 209.99.185.117:63487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "overlandpublishing.com"] [uri "/.env"] [unique_id "avdFvSs8zA0sSsRyyaT40AAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 11:55:56
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:55:40.872595 2026] [security2:error] [pid 13017:tid 13017] [client 209.99.185.117:61111] ...
show more
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:55:40.872595 2026] [security2:error] [pid 13017:tid 13017] [client 209.99.185.117:61111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calvarycavaliers.org"] [uri "/.env"] [unique_id "avb6vBK9M4--aPxlsBUq6gAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 11:13:53
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:13:38.810518 2026] [security2:error] [pid 20347:tid 20347] [client 209.99.185.117:50385] ...
show more
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:13:38.810518 2026] [security2:error] [pid 20347:tid 20347] [client 209.99.185.117:50385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kerrywood.com"] [uri "/.env"] [unique_id "avbw4kFLlNDwnjCQ_u7PBQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:13:28
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:13:10.838915 2026] [security2:error] [pid 27058:tid 27058] [client 209.99.185.117:49714] ...
show more
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:13:10.838915 2026] [security2:error] [pid 27058:tid 27058] [client 209.99.185.117:49714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "otfes.com"] [uri "/.env"] [unique_id "avbUpvVNfiJuZJHkf0eM7gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 07:26:40
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:26:22.395911 2026] [security2:error] [pid 3307:tid 3307] [client 209.99.185.117:65144] M ...
show more
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:26:22.395911 2026] [security2:error] [pid 3307:tid 3307] [client 209.99.185.117:65144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "formationone.com"] [uri "/.env"] [unique_id "ava7nm6iJbFihZTSi_MJQAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 07:06:43
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:06:28.308136 2026] [security2:error] [pid 9760:tid 9760] [client 209.99.185.117:59672] M ...
show more
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:06:28.308136 2026] [security2:error] [pid 9760:tid 9760] [client 209.99.185.117:59672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "join.oxfordgliding.com"] [uri "/.env"] [unique_id "ava29JUDIbZKsKhB3UjHTAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 06:33:14
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:32:59.261148 2026] [security2:error] [pid 1939:tid 1939] [client 209.99.185.117:59050] M ...
show more
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:32:59.261148 2026] [security2:error] [pid 1939:tid 1939] [client 209.99.185.117:59050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abeltours.com"] [uri "/.env"] [unique_id "avavG8Bd7YT3ORUXaypJBwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 06:03:59
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:03:44.025907 2026] [security2:error] [pid 27548:tid 27559] [client 209.99.185.117:50137] ...
show more
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:03:44.025907 2026] [security2:error] [pid 27548:tid 27559] [client 209.99.185.117:50137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garyjahrig.com"] [uri "/.env"] [unique_id "avaoQDJcxsXIhR4Hlib9sQAAAcI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 04:22:54
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:22:38.443831 2026] [security2:error] [pid 11020:tid 11027] [client 209.99.185.117:64239] ...
show more
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:22:38.443831 2026] [security2:error] [pid 11020:tid 11027] [client 209.99.185.117:64239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abundancebible.com"] [uri "/.env"] [unique_id "avaQjsHaOsQjRjQKrjQ7bQAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 03:35:20
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:35:06.759369 2026] [security2:error] [pid 27434:tid 27434] [client 209.99.185.117:61861] ...
show more
(mod_security) mod_security (id:210492) triggered by 209.99.185.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:35:06.759369 2026] [security2:error] [pid 27434:tid 27434] [client 209.99.185.117:61861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "orthopaedicsurgical.com"] [uri "/.env"] [unique_id "avaFajwOO5WJnxv4wNSXSwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
