🇺🇸
deskpass.com
2026-05-13 23:28:08
(3 months ago)
GET /admin/api.php
Web App Attack
🇩🇪
voemedia
2026-05-12 09:05:49
(3 months ago)
*Port Scan* detected from 2607:ff68:7:6f:214:dcff:fec8:1479 (US/United States/-).
Port Scan
🇺🇸
TPI-Abuse
2026-05-10 05:50:38
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 01:50:31.905996 2026] [security2:error] [pid 17923:tid 17923] [client 2607:ff68:7:6f:214:dcff:fec8:1479:37428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.deborbon.me"] [uri "/.git/config"] [unique_id "agAcp_x_K8BfUSwWX_Zo9wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
bensmithurst
2026-05-04 05:11:04
(3 months ago)
2607:ff68:7:6f:214:dcff:fec8:1479 - - [04/May/2026:05:10:59 +0000] "GET /redirect?url=http://169.254 ...
show more
2607:ff68:7:6f:214:dcff:fec8:1479 - - [04/May/2026:05:10:59 +0000] "GET /redirect?url=http://169.254.169.254/latest/meta-data/ HTTP/1.1" 404 2351 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.0.0 Safari/537.36"
2607:ff68:7:6f:214:dcff:fec8:1479 - - [04/May/2026:05:10:59 +0000] "GET /proxy?url=http://169.254.169.254/latest/meta-data/ HTTP/1.1" 404 2351 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
2607:ff68:7:6f:214:dcff:fec8:1479 - - [04/May/2026:05:10:59 +0000] "GET /fetch?url=http://169.254.169.254/latest/meta-data/ HTTP/1.1" 404 2402 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
2607:ff68:7:6f:214:dcff:fec8:1479 - - [04/May/2026:05:11:00 +0000] "GET /api/proxy?url=http://169.254.169.254/latest/meta-data/iam/security
... [host=CER***]
show less
Web App Attack
🇧🇪
cmbplf
2026-04-30 10:41:15
(4 months ago)
586 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-28 19:29:13
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 15:29:09.427444 2026] [security2:error] [pid 32222:tid 32222] [client 2607:ff68:7:6f:214:dcff:fec8:1479:50724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.computerizer.org"] [uri "/.env"] [unique_id "afEKhfiviVwa0m5Xsmh7vgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 18:42:05
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 14:42:00.350411 2026] [security2:error] [pid 19790:tid 19790] [client 2607:ff68:7:6f:214:dcff:fec8:1479:38346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.champschallenge.org"] [uri "/.env"] [unique_id "afD_eJeMk0Hu_N5MOF984gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 17:41:57
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 13:41:52.386191 2026] [security2:error] [pid 28693:tid 28730] [client 2607:ff68:7:6f:214:dcff:fec8:1479:58318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.angelicarunfarm.org"] [uri "/.env"] [unique_id "afDxYKTVEdte17CxWF_sxwAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 16:26:22
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 12:26:16.674987 2026] [security2:error] [pid 7120:tid 7120] [client 2607:ff68:7:6f:214:dcff:fec8:1479:57750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intertecs.org"] [uri "/.env"] [unique_id "afDfqOQBLEIZe1-rxn7d5wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 12:04:19
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 08:04:12.882377 2026] [security2:error] [pid 27974:tid 28054] [client 2607:ff68:7:6f:214:dcff:fec8:1479:57322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ellicottville.net"] [uri "/.env"] [unique_id "afCiPKsGp0Xv5SrSz0puwQAAAdY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 11:26:43
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 07:26:39.165660 2026] [security2:error] [pid 17846:tid 17846] [client 2607:ff68:7:6f:214:dcff:fec8:1479:48606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3905ccn.org"] [uri "/.env"] [unique_id "afCZb7sW4aHWz9ctb23BQgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 10:32:16
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 06:32:09.260550 2026] [security2:error] [pid 4586:tid 4598] [client 2607:ff68:7:6f:214:dcff:fec8:1479:59534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aafim.org"] [uri "/.env"] [unique_id "afCMqW6UCaS8_KAm2gw-uAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 08:44:07
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 04:44:02.401918 2026] [security2:error] [pid 18044:tid 18044] [client 2607:ff68:7:6f:214:dcff:fec8:1479:40398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.delucchi.net"] [uri "/.env"] [unique_id "afBzUoujuQzJ10V3CXzPtgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 07:28:27
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 03:28:19.285497 2026] [security2:error] [pid 31777:tid 31777] [client 2607:ff68:7:6f:214:dcff:fec8:1479:38706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iwsa.info"] [uri "/.env"] [unique_id "afBhk8UHOKVS_9rHevwdtQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 07:12:18
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:ff68:7:6f:214:dcff:fec8:1479 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 03:12:12.763515 2026] [security2:error] [pid 17549:tid 17549] [client 2607:ff68:7:6f:214:dcff:fec8:1479:59356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "haarr.net"] [uri "/.env"] [unique_id "afBdzIVi0wIgepCPafYpkQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack