🇺🇸
TPI-Abuse
2026-09-14 17:14:42
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 13:14:33.744906 2026] [security2:error] [pid 19090:tid 19090] [client 64.95.11.114:49900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uphillfarmvt.com"] [uri "/.env"] [unique_id "aqgreW0o-n4fWhRuhVKclgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 15:24:19
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 11:24:14.792744 2026] [security2:error] [pid 31507:tid 31507] [client 64.95.11.114:42988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "partytimegame.com"] [uri "/.env"] [unique_id "aqgRnlPNx4rMiL_EZjS73gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-09-14 14:55:00
(3 days ago)
csagent: score 19.8: secrets grab x2; 2 domain(s) in 0s
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 14:46:00
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 10:45:51.727445 2026] [security2:error] [pid 31160:tid 31160] [client 64.95.11.114:49776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelkivisto.com"] [uri "/.env"] [unique_id "aqgInz6lshdaHS0xXlLiPQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-14 13:44:09
(3 days ago)
[ns3.backorder.gr] httpd-config-scan: sites=www.iatrika-analosima.gr; logs=/var/log/httpd/domains/ia ...
show more
[ns3.backorder.gr] httpd-config-scan: sites=www.iatrika-analosima.gr; logs=/var/log/httpd/domains/iatrika-analosima.gr.log; samples=/.env
show less
Hacking
Web App Attack
🇩🇪
paissangroup
2026-09-14 13:43:26
(3 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 12:40:11
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 08:40:05.062437 2026] [security2:error] [pid 27567:tid 27567] [client 64.95.11.114:35392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edgecomix.com"] [uri "/.env"] [unique_id "aqfrJb78Ou0E8rryfI3hIAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
mieg
2026-09-14 12:36:37
(3 days ago)
Web vulnerability probing
Brute-Force
Web App Attack
🇩🇪
LRob
2026-09-14 12:10:03
(3 days ago)
Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 AppleWebKit/537. ...
show more
Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.1; +https://openai.com/gptbot | path: /.env | 2026-09-14 12:10 UTC
show less
Bad Web Bot
2026-09-14 12:10:02
(3 days ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 11:54:54
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 07:54:48.878682 2026] [security2:error] [pid 26392:tid 26392] [client 64.95.11.114:37856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedfarmersmarkets.org"] [uri "/.env"] [unique_id "aqfgiBJ1Xr-hqSCEc767FAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-09-14 11:50:16
(3 days ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇦🇺
2000cn.com.au
2026-09-14 11:25:50
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-14 11:19:03
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 07:18:55.947293 2026] [security2:error] [pid 27352:tid 27352] [client 64.95.11.114:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bbproductionsonline.com"] [uri "/.env"] [unique_id "aqfYH8U6hSxVhQC_Mg2fOAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 10:44:12
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.95.11.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 06:44:06.981671 2026] [security2:error] [pid 1889:tid 1889] [client 64.95.11.114:42562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abbeygardensllandudno.com"] [uri "/.env"] [unique_id "aqfP9quPh7MkhLrfIj1jHwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack