🇬🇧
Mendip_Defender
2026-08-04 13:13:53
(1 month ago)
2a09:bac1:76a0:460::5e:4a - - [04/Aug/2026:14:13:57 +0100] "GET /env.json HTTP/1.1" 404 6331 "-" "Mo ...
show more
2a09:bac1:76a0:460::5e:4a - - [04/Aug/2026:14:13:57 +0100] "GET /env.json HTTP/1.1" 404 6331 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
...
show less
Bad Web Bot
🇳🇱
Savvii
2026-08-04 12:35:23
(1 month ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-07-29 18:53:14
(1 month ago)
118 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-29 17:55:15
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 13:55:09.496307 2026] [security2:error] [pid 1635328:tid 1635328] [client 2a09:bac1:76a0:460::5e:4a:25878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.fxztrader.com"] [uri "/.env"] [unique_id "amo-fXTOinYnDwFlp4L7GAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 13:50:39
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 09:50:34.337966 2026] [security2:error] [pid 4285:tid 4285] [client 2a09:bac1:76a0:460::5e:4a:21554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sheldondesigns.info"] [uri "/.env"] [unique_id "amizqjt1_OSGjJCWm9hpkAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 13:17:06
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 09:17:02.129125 2026] [security2:error] [pid 1703374:tid 1703441] [client 2a09:bac1:76a0:460::5e:4a:30276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.kellenlee.com"] [uri "/.env"] [unique_id "amirzgZBHN8g1RS6LsojtQAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 12:48:49
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 08:48:43.459343 2026] [security2:error] [pid 1951814:tid 1951814] [client 2a09:bac1:76a0:460::5e:4a:36558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ecuablue.farm"] [uri "/.env"] [unique_id "amilK3mGPDc9JbVp5DtG7gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 12:27:18
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 08:27:13.920757 2026] [security2:error] [pid 1591220:tid 1591220] [client 2a09:bac1:76a0:460::5e:4a:17198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.z-industrial.com"] [uri "/.env"] [unique_id "amigIehsJ7EDtRKr11PpbAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 11:55:27
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 07:55:23.226027 2026] [security2:error] [pid 404229:tid 404229] [client 2a09:bac1:76a0:460::5e:4a:13514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.hollorancompanies.com"] [uri "/.env"] [unique_id "amiYq5Ytr3I9ErmE8mImzwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-07-27 23:59:18
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-07-27 02:05:10
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 22:05:06.227121 2026] [security2:error] [pid 2488006:tid 2488006] [client 2a09:bac1:76a0:460::5e:4a:22996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.aluminatrailers.com"] [uri "/.env.local"] [unique_id "ama80jF9LDfOzdgPMRq5PAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 20:57:40
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 16:57:37.261770 2026] [security2:error] [pid 2881557:tid 2881557] [client 2a09:bac1:76a0:460::5e:4a:54802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "w360.mx"] [uri "/.env"] [unique_id "amZ0wb4J7zcDmYftMhpjOAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-07-26 20:57:11
(1 month ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 20:39:50
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76a0:460::5e:4a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 16:39:45.274198 2026] [security2:error] [pid 2291611:tid 2291611] [client 2a09:bac1:76a0:460::5e:4a:59202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.h2ofall.co"] [uri "/.env"] [unique_id "amZwkScvlJeMOn6h5itoGQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
debaba
2026-07-24 11:22:58
(2 months ago)
[24/Jul/2026:11:22:58.206322 +0000] amNLEq2vznw1xGghgJUvaQAAAFA 2a09:bac1:76a0:460::5e:4a 36242 127. ...
show more
[24/Jul/2026:11:22:58.206322 +0000] amNLEq2vznw1xGghgJUvaQAAAFA 2a09:bac1:76a0:460::5e:4a 36242 127.0.0.1 7080
[24/Jul/2026:11:22:58.471421 +0000] amN
...
show less
Brute-Force
Web App Attack
