🇺🇸
TPI-Abuse
2026-10-19 22:09:37
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 18:09:30.241776 2026] [security2:error] [pid 1885:tid 1885] [client 62.112.195.194:46126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jerryhetrick.com"] [uri "/.env"] [unique_id "ataVGmpQHosJqZ2KIv38uwAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-19 21:52:17
(1 day ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 62.112.195.194 - - [19/Oct/2026:23:52:13 +0200] "GET /.env HTTP/1.1" 301 443 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 21:48:29
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 17:48:20.795847 2026] [security2:error] [pid 16050:tid 16050] [client 62.112.195.194:48978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toptek.com"] [uri "/.env"] [unique_id "ataQJAJ_uE5pusiTriBTTAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 18:36:02
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 14:35:55.451197 2026] [security2:error] [pid 1878:tid 1878] [client 62.112.195.194:36424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cameronsol.com"] [uri "/.env"] [unique_id "atZjC_E65HmgEVfa_y9djwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-19 15:00:39
(1 day ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 10:49:25
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 06:49:19.583781 2026] [security2:error] [pid 12688:tid 12688] [client 62.112.195.194:34376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rankinpollination.com"] [uri "/.env"] [unique_id "atX1r8a1Yg2DXqiqhRpvyQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 06:49:39
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 02:49:34.080745 2026] [security2:error] [pid 24990:tid 24990] [client 62.112.195.194:57372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flybits.co.uk"] [uri "/.env"] [unique_id "atW9fjUgsQImOIjEdnxYiwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇳
Peter Yu
2026-10-16 09:16:31
(5 days ago)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 10:49:34
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 06:49:28.777587 2026] [security2:error] [pid 24601:tid 24601] [client 62.112.195.194:34362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chezlubacov.org"] [uri "/.env"] [unique_id "arZRuP1PwdI38AVZCpdBWAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-09-25 07:42:42
(3 weeks ago)
Try to access /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 05:45:29
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 01:45:25.510519 2026] [security2:error] [pid 5731:tid 5731] [client 62.112.195.194:43688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "winestoria.com"] [uri "/.env"] [unique_id "arYKdRiIB06HiWrElWRO7QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:48:21
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:48:17.678527 2026] [security2:error] [pid 24921:tid 24921] [client 62.112.195.194:43182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "portraitsinblues.com"] [uri "/wp-config.php.bak"] [unique_id "arLpkWiexqKPxoPkrUGlRgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:21:50
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:21:43.964250 2026] [security2:error] [pid 12445:tid 12445] [client 62.112.195.194:38342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "comfortcartel.com"] [uri "/wp-config.php.bak"] [unique_id "arK5J9ZMkWdJGOG075UGqAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:12:33
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:12:26.014960 2026] [security2:error] [pid 28492:tid 28492] [client 62.112.195.194:50584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wadenelson.com"] [uri "/wp-config.php.bak"] [unique_id "arKo6kzfGe9IMWNeoydEagAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:35:18
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 62.112.195.194 (dvscsrv.cts.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:35:14.928143 2026] [security2:error] [pid 9682:tid 9682] [client 62.112.195.194:48790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "von-s.com"] [uri "/wp-config.php.bak"] [unique_id "arKEEq2Yha-_6qKHCQ_xfQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
