🇺🇸
TPI-Abuse
2026-06-01 21:01:20
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 17:01:13.976510 2026] [security2:error] [pid 23135:tid 23135] [client 72.62.215.121:49170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "friendlyfarm4fun.com"] [uri "/api/.env"] [unique_id "ah3zGTP122qBBa0btFV7AgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 20:39:16
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 16:39:12.276984 2026] [security2:error] [pid 16037:tid 16037] [client 72.62.215.121:48390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "talkingmess.com"] [uri "/api/.env"] [unique_id "ah3t8BXfCvfpkvNivmFTcgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 19:57:46
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 15:57:41.541415 2026] [security2:error] [pid 15962:tid 15962] [client 72.62.215.121:52908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "taltonfamily.com"] [uri "/.env"] [unique_id "ah3kNa3KYHmGDc0sZ5LN9wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-06-01 19:11:11
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 19:04:30
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 15:04:24.766052 2026] [security2:error] [pid 13207:tid 13207] [client 72.62.215.121:27202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swpppcal.com"] [uri "/core/.env"] [unique_id "ah3XuDLCQO3zwA2VQfC8egAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 18:32:24
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 14:32:19.082186 2026] [security2:error] [pid 25995:tid 25995] [client 72.62.215.121:37864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shinynew.com"] [uri "/app/.env"] [unique_id "ah3QM-j8KUR7lfQ4R9_lwAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-01 17:57:50
(2 days ago)
(caddyscan) Scanner path probe from 72.62.215.121 (GB/United Kingdom/-): 5 in the last 3600 secs; Po ...
show more
(caddyscan) Scanner path probe from 72.62.215.121 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 72.62.215.121 - - [01/Jun/2026:17:57:48 +0000] "GET /admin/.env HTTP/1.1"
[REDACTED] 200 2627 72.62.215.121 - - [01/Jun/2026:17:57:48 +0000] "GET /dev/.env HTTP/1.1"
[REDACTED] 200 2627 72.62.215.121 - - [01/Jun/2026:17:57:48 +0000] "GET /backend/.env HTTP/1.1"
[REDACTED] 200 2627 72.62.215.121 - - [01/Jun/2026:17:57:48 +0000] "GET /api/.env HTTP/1.1"
[REDACTED] 200 2627 72.62.215.121 - - [01/Jun/2026:17:57:48 +0000] "GET /new/.env HTTP/1.1"
show less
Port Scan
🇦🇺
screwlooseit.com.au
2026-06-01 17:41:31
(2 days ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/-
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 17:19:32
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 13:19:26.635254 2026] [security2:error] [pid 2519:tid 2519] [client 72.62.215.121:60180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "campfearnc.com"] [uri "/dev/.env"] [unique_id "ah2_HpGZ7EmSKbcCPg8imgAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 15:41:29
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 11:41:26.408098 2026] [security2:error] [pid 16796:tid 16833] [client 72.62.215.121:37648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hdtv55.com"] [uri "/api/.env"] [unique_id "ah2oJlzsgS2Rrq-IYK2R_AAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jcbriar
2026-06-01 15:14:50
(2 days ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 14:51:51
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 10:51:44.496173 2026] [security2:error] [pid 5697:tid 5697] [client 72.62.215.121:64710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icaruscreativearts.com"] [uri "/api/.env"] [unique_id "ah2cgHwa304XXsMZoWxgTQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 14:18:15
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 10:18:11.400312 2026] [security2:error] [pid 4169:tid 4169] [client 72.62.215.121:23018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sahinozalit.com"] [uri "/dev/.env"] [unique_id "ah2Uo_bt90HMhtys_hDQwwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
paissangroup
2026-06-01 12:49:43
(2 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 12:42:07
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 72.62.215.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 08:42:03.211709 2026] [security2:error] [pid 6605:tid 6605] [client 72.62.215.121:26626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sternscape.com"] [uri "/dev/.env"] [unique_id "ah1-G2-bvPZ-98P8XwR91gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack