2025-12-15 08:12:48
(5 months ago)
Blocked: Reason='Auto-block via DW'; Requests=0
Hacking
🇨🇭
zynex
2025-11-16 12:14:26
(6 months ago)
URL Probing: /config/.env
Web App Attack
🇨🇭
Origon
2025-11-16 11:11:52
(6 months ago)
http-sensitive-files - IP: 3.141.10.116 - time="2025-11-16T12:11:51+01:00" level=info msg="(555f66b ...
show more
http-sensitive-files - IP: 3.141.10.116 - time="2025-11-16T12:11:51+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 3.141.10.116 (US/16509) : 4h ban on Ip 3.141.10.116"
show less
Web App Attack
🇩🇪
paissangroup
2025-11-16 07:30:04
(6 months ago)
Multiple WAF Violations
Web App Attack
🇪🇸
boscolopez
2025-11-16 07:21:25
(6 months ago)
3.141.10.116 - - [16/Nov/2025:08:21:24 +0100] "GET /.env HTTP/1.1" 403 146 "-" "python-httpx/0.24.1" ...
show more
3.141.10.116 - - [16/Nov/2025:08:21:24 +0100] "GET /.env HTTP/1.1" 403 146 "-" "python-httpx/0.24.1" "0.000" "-"
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-16 06:28:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 3.141.10.116 (ec2-3-141-10-116.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.141.10.116 (ec2-3-141-10-116.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 01:28:32.860201 2025] [security2:error] [pid 17647:tid 17647] [client 3.141.10.116:33654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fcc.robotrodeo.net"] [uri "/.env.save"] [unique_id "aRlvELS5QqeRsgZ8J-PQqwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-16 05:32:13
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 3.141.10.116 (ec2-3-141-10-116.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.141.10.116 (ec2-3-141-10-116.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 00:32:09.812783 2025] [security2:error] [pid 6031:tid 6031] [client 3.141.10.116:39630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fetchamreadingroom.org.my-spec.com"] [uri "/.env.local"] [unique_id "aRlh2c47cugB7H-f9yFnawAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Xiaohack
2025-11-16 04:14:23
(6 months ago)
2025-11-16 05:13:48 WARNING: 404 list at URL: /.env - Referrer: No referrer - List: 404 Not Found: T ...
show more
2025-11-16 05:13:48 WARNING: 404 list at URL: /.env - Referrer: No referrer - List: 404 Not Found: The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again. - IP: 3.141.10.116 - User-Agent: python-httpx/0.24.1 [in routes : not_found_error : 30]
2025-11-16 05:14:22 WARNING: 404 list at URL: /.env.dev - Referrer: No referrer - List: 404 Not Found: The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again. - IP: 3.141.10.116 - User-Agent: python-httpx/0.24.1 [in routes : not_found_error : 30]
2025-11-16 05:14:22 WARNING: 404 list at URL: /.env.local - Referrer: No referrer - List: 404 Not Found: The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again. - IP: 3.141.10.116 - User-Agent: python-httpx/0.24.1 [in routes : not_found_error : 30]
2025-11-16 05:14:22 WARNING: 404 list at URL: /.env.prod - Referre
...
show less
Open Proxy
Bad Web Bot
🇳🇱
homeshowdomain.nl
2025-11-15 23:01:48
(6 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-14.
show less
Hacking
Web App Attack
SSH
🇦🇺
weblite
2025-11-15 19:33:32
(6 months ago)
WP_EXPLOIT_PROBE WP_MALWARE_PROBE
Hacking
Web App Attack
2025-11-15 03:15:02
(6 months ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2025-11-15 03:13:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 3.141.10.116 (ec2-3-141-10-116.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.141.10.116 (ec2-3-141-10-116.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 22:13:20.579970 2025] [security2:error] [pid 11919:tid 11919] [client 3.141.10.116:36216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hopeforthefuture.africa.greenlight.us"] [uri "/.git/config"] [unique_id "aRfv0NgnRq-ykNShbOw2LQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-14 17:09:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 3.141.10.116 (ec2-3-141-10-116.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.141.10.116 (ec2-3-141-10-116.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 12:09:03.092889 2025] [security2:error] [pid 12099:tid 12099] [client 3.141.10.116:49216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "innatmichaellynns.com"] [uri "/.git/config"] [unique_id "aRdiL9Li1eDMD8mbpUyO8QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-05-19 09:06:40
(2 years ago)
(mod_security) mod_security (id:211180) triggered by 3.141.10.116 (ec2-3-141-10-116.us-east-2.comput ...
show more
(mod_security) mod_security (id:211180) triggered by 3.141.10.116 (ec2-3-141-10-116.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 19 05:06:33.294158 2024] [security2:error] [pid 14471] [client 3.141.10.116:44680] [client 3.141.10.116] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "50"] [id "211180"] [rev "3"] [msg "COMODO WAF: Session Fixation: SessionID Parameter Name with No Referer||depthsofsatan.com|F|2"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "depthsofsatan.com"] [uri "/forum/index.php"] [unique_id "ZknBGWot4TqBA449iceMxwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-05-19 08:02:23
(2 years ago)
Web attack
Bad Web Bot
Web App Attack