๐ฉ๐ช
ghostwarriors
2026-06-13 19:50:10
(4 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 19:35:40
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 15:35:36.516194 2026] [security2:error] [pid 7335:tid 7335] [client 79.127.160.169:14494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "valuechains4poor.net"] [uri "/.env"] [unique_id "ai2xCLY9QxIyPA-CYpboAgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
poundawebsiteltd
2026-06-13 19:22:23
(4 days ago)
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 79.127.160.169 - - [13/Jun/2026:2 ...
show more
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 79.127.160.169 - - [13/Jun/2026:20:22:20 +0100] GET /sendgrid/.env HTTP/1.1 403 214 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 19:06:31
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 15:06:28.739171 2026] [security2:error] [pid 2912:tid 2912] [client 79.127.160.169:30129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.orthopaedicsurgical.com"] [uri "/.env"] [unique_id "ai2qNJe0e-lyhjjltVTpSgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
conseilgouz
2026-06-13 18:57:52
(4 days ago)
vee-17 : Block hidden directories=>/.env(/)
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-13 18:48:36
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 14:48:28.608752 2026] [security2:error] [pid 7224:tid 7224] [client 79.127.160.169:54508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.34thprs.org"] [uri "/.env"] [unique_id "ai2l_AOPtW1iZmZvgS96UwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
bescared
2026-06-13 18:39:15
(4 days ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 18:28:49
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 14:28:43.526096 2026] [security2:error] [pid 29999:tid 29999] [client 79.127.160.169:62179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "janyoors.com"] [uri "/.env"] [unique_id "ai2hW06892LQSZofXMbJUwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
london2038.com
2026-06-13 18:09:45
(4 days ago)
Probing for exploits
79.127.160.169 - - [13/Jun/2026:20:09:34 +0200] "GET /.env HTTP/1.1" 422 0 "-" ...
show more
Probing for exploits
79.127.160.169 - - [13/Jun/2026:20:09:34 +0200] "GET /.env HTTP/1.1" 422 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
79.127.160.169 - - [13/Jun/2026:20:09:41 +0200] "GET /sendgrid/.env HTTP/1.1" 422 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
show less
Hacking
Web App Attack
๐ง๐ท
Halux
2026-06-13 17:35:44
(4 days ago)
79.127.160.169 Probing protected path or service
Web App Attack
๐ฉ๐ช
raph
2026-06-13 17:35:43
(4 days ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 16:48:56
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 12:48:49.170278 2026] [security2:error] [pid 17597:tid 17597] [client 79.127.160.169:20972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sabbathschoolguide.gods-law.com"] [uri "/.env"] [unique_id "ai2J8bti0zqQxIA6U-ap8AAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 16:10:06
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 12:09:57.821959 2026] [security2:error] [pid 11907:tid 11907] [client 79.127.160.169:11065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.robhoward.me"] [uri "/.env"] [unique_id "ai2A1dhXpZeCvJQDsd46nwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 15:50:27
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:50:21.645146 2026] [security2:error] [pid 11186:tid 11186] [client 79.127.160.169:15932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rcjlawfirm.com"] [uri "/.env"] [unique_id "ai18PZgLVCwxnphHnc6_ZAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 15:28:32
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 79.127.160.169 (unn-79-127-160-169.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:28:27.117056 2026] [security2:error] [pid 8073:tid 8073] [client 79.127.160.169:11037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "renjunews.com"] [uri "/.env"] [unique_id "ai13GyozBsPyqTRX0vMpFgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack