🇺🇸
dtorrer
2026-06-15 16:29:29
(2 weeks ago)
General vulnerability scan.
Port Scan
🇺🇸
TPI-Abuse
2026-06-15 16:11:14
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2600:3c02::f03c:92ff:fe81:98f5 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2600:3c02::f03c:92ff:fe81:98f5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 12:11:08.104500 2026] [security2:error] [pid 16621:tid 16621] [client 2600:3c02::f03c:92ff:fe81:98f5:58776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "redlinechemical.com"] [uri "/api/.env"] [unique_id "ajAkHPA4H8MNIF_qWbAPwAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oralunal
2026-06-15 13:00:13
(2 weeks ago)
IP banned by Fail2Ban in jail oral-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-06-15 12:54:11
(2 weeks ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-15 12:48:22
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2600:3c02::f03c:92ff:fe81:98f5 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2600:3c02::f03c:92ff:fe81:98f5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 08:48:17.404165 2026] [security2:error] [pid 8575:tid 8575] [client 2600:3c02::f03c:92ff:fe81:98f5:59934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arriagarealestate.com"] [uri "/app/.env"] [unique_id "ai_0keR8nB0rQH3b91jn7QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-06-15 12:38:56
(2 weeks ago)
2.917 requests with url.path *.env
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-15 12:22:01
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2600:3c02::f03c:92ff:fe81:98f5 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2600:3c02::f03c:92ff:fe81:98f5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 08:21:54.199486 2026] [security2:error] [pid 22771:tid 22771] [client 2600:3c02::f03c:92ff:fe81:98f5:44600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "themillercsefoundation.org"] [uri "/api/.env"] [unique_id "ai_uYjoWiJExbGyARkyH0QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 11:56:47
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2600:3c02::f03c:92ff:fe81:98f5 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2600:3c02::f03c:92ff:fe81:98f5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 07:56:42.967040 2026] [security2:error] [pid 27815:tid 27815] [client 2600:3c02::f03c:92ff:fe81:98f5:46954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "akronpartybuses.com"] [uri "/.env"] [unique_id "ai_oek0iXIxqUhlh-fscrAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 08:51:09
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2600:3c02::f03c:92ff:fe81:98f5 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2600:3c02::f03c:92ff:fe81:98f5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 04:51:04.667479 2026] [security2:error] [pid 24473:tid 24473] [client 2600:3c02::f03c:92ff:fe81:98f5:47796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kildarafarms.com"] [uri "/.env"] [unique_id "ai-8-L7laClV4_5dMIc_sQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 08:34:15
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2600:3c02::f03c:92ff:fe81:98f5 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2600:3c02::f03c:92ff:fe81:98f5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 04:34:11.069699 2026] [security2:error] [pid 17047:tid 17047] [client 2600:3c02::f03c:92ff:fe81:98f5:50254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cayman-boat-registration.com"] [uri "/.env"] [unique_id "ai-5A0wOGMhCQVDrN8is-wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack