🇧🇪
voormedia
2026-08-21 16:43:42
(4 days ago)
Accessed trap at '/.git/HEAD'
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 06:36:13
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 02:36:06.114465 2026] [security2:error] [pid 4596:tid 4596] [client 51.15.46.253:45874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.manichri.com"] [uri "/.git/HEAD"] [unique_id "aofx1iT7mKMNW4rXHT7fEQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
zcampbell
2026-08-04 08:35:05
(3 weeks ago)
Web vulnerability scanning: probing for exposed sensitive files (.env). Detected and blocked automat ...
show more
Web vulnerability scanning: probing for exposed sensitive files (.env). Detected and blocked automatically.
show less
Web App Attack
Bad Web Bot
🇩🇪
dpsbs
2026-06-01 23:59:23
(2 months ago)
multiple ips intrustions detected
Hacking
🇮🇱
spd.co.il
2026-05-24 09:05:45
(3 months ago)
Web application attack detected
Hacking
Web App Attack
🇨🇭
backslash
2026-05-23 05:21:04
(3 months ago)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-08 07:05:37
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 03:05:29.617222 2026] [security2:error] [pid 2129:tid 2129] [client 51.15.46.253:47586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.coretherapyassoc.com"] [uri "/.git/HEAD"] [unique_id "af2LOXGlpbKTCCk8RMGpDgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 09:58:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 05:58:10.592206 2026] [security2:error] [pid 5344:tid 5344] [client 51.15.46.253:41500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sentinel-sg.com.springmeadowventures.com"] [uri "/.git/HEAD"] [unique_id "ae3hstK6edsMAQWvYuM-mAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-04-26 00:36:11
(4 months ago)
Accessed trap at '/.git/HEAD'
Web App Attack
🇺🇸
TPI-Abuse
2026-02-28 00:26:39
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 19:26:33.519074 2026] [security2:error] [pid 10791:tid 10791] [client 51.15.46.253:41450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gcdata.wisdomwfm.com"] [uri "/.env"] [unique_id "aaI2OSl6DxC21E5kwq0c4QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-02-24 01:52:05
(6 months ago)
Accessed trap at '/.git/HEAD'
Web App Attack
🇺🇸
TPI-Abuse
2026-02-17 21:11:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 16:11:02.578082 2026] [security2:error] [pid 26210:tid 26210] [client 51.15.46.253:46146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.aandsmetal.com"] [uri "/.env"] [unique_id "aZTZZnnyQg3TvGGtaGYhegAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-17 19:49:34
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 14:49:26.589193 2026] [security2:error] [pid 12088:tid 12088] [client 51.15.46.253:49156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.wizind.com"] [uri "/.env"] [unique_id "aZTGRqY81cllCh5z2rNyawAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-01-31 18:31:12
(6 months ago)
IM360 WAF: Laravel .env file access
Web App Attack
🇺🇸
TPI-Abuse
2026-01-31 18:13:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.15.46.253 (253-46-15-51.rev.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 13:13:27.847542 2026] [security2:error] [pid 20252:tid 20252] [client 51.15.46.253:40334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adj-tech.net"] [uri "/.env"] [unique_id "aX5GR_dokx7YQ1vyvqpcgQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack