πΊπΈ
TPI-Abuse
2026-07-30 07:49:36
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 03:49:29.966225 2026] [security2:error] [pid 1818875:tid 1818875] [client 213.176.24.74:55565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.233"] [uri "/.env"] [unique_id "amsCCeod2BDAF52suB5KKAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-30 05:26:49
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 01:26:43.466120 2026] [security2:error] [pid 2795871:tid 2795871] [client 213.176.24.74:18904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.242"] [uri "/.env"] [unique_id "amrgk01EM9Zk0SiYV3VfkgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
Admins@FBN
2026-07-30 05:15:03
(4 hours ago)
FW-PortScan: Traffic Blocked srcport=31869 dstport=80
Port Scan
πΊπΈ
TPI-Abuse
2026-07-30 05:11:27
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 01:11:21.525310 2026] [security2:error] [pid 3663615:tid 3663615] [client 213.176.24.74:56152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.218"] [uri "/.env"] [unique_id "amrc-Vl21ZI7KW9k9ErHOgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-30 04:45:25
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 00:45:17.205530 2026] [security2:error] [pid 671473:tid 671473] [client 213.176.24.74:60411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.217"] [uri "/.env"] [unique_id "amrW3ZefSLUqKjzsmp7XpgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
Admins@FBN
2026-07-30 04:37:45
(5 hours ago)
FW-PortScan: Traffic Blocked srcport=55744 dstport=80
Port Scan
π©πͺ
Admins@FBN
2026-07-30 04:05:33
(5 hours ago)
FW-PortScan: Traffic Blocked srcport=62048 dstport=80
Port Scan
π³π±
VMHeaven.io
2026-07-30 03:45:06
(5 hours ago)
Blocked by UFW [80/tcp]
Source port: 12834
TTL: 118
Packet length: 52
Port Scan
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-30 03:28:04
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 23:27:58.426782 2026] [security2:error] [pid 3391429:tid 3391429] [client 213.176.24.74:37088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.237"] [uri "/.env"] [unique_id "amrEvjubdnfoqxybP2XAiAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
NXTwoThou
2026-07-30 03:23:52
(6 hours ago)
/.env
Web App Attack
π©πͺ
Admins@FBN
2026-07-30 02:23:13
(7 hours ago)
FW-PortScan: Traffic Blocked srcport=39838 dstport=80
Port Scan
πΊπΈ
TPI-Abuse
2026-07-30 01:57:17
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 21:57:09.930723 2026] [security2:error] [pid 3060104:tid 3060104] [client 213.176.24.74:56755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.90"] [uri "/.env"] [unique_id "amqvdVDTPvn58SUuFHBY_AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¦πΊ
Bay13
2026-07-30 01:53:50
(7 hours ago)
CrowdSec:custom/http-sensitive-files
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-30 01:42:13
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 213.176.24.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 21:42:08.201760 2026] [security2:error] [pid 96378:tid 96378] [client 213.176.24.74:55324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.116"] [uri "/.env"] [unique_id "amqr8AwA43Gvfik2-yNWdgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πͺπΈ
alferez
2026-07-30 01:21:17
(8 hours ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack