🇮🇹
madaello
2026-03-06 16:10:45
(6 months ago)
[Fri Mar 06 17:10:44.654866 2026] [ssl:error] [pid 2100692:tid 2100692] [client 89.249.195.225:52487 ...
show more
[Fri Mar 06 17:10:44.654866 2026] [ssl:error] [pid 2100692:tid 2100692] [client 89.249.195.225:52487] AH02032: Hostname www.imperatrice.to.it provided via SNI and hostname 93.55.83.202 provided via HTTP have no compatible SSL setup for policy 'secure'
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-01-27 03:00:18
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 89.249.195.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 89.249.195.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 22:00:09.950464 2026] [security2:error] [pid 16656:tid 16675] [client 89.249.195.225:46961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.kettlehill.com"] [uri "/.env.stage"] [unique_id "aXgqOT4D1upuVdMC6K4NtQAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-17 15:24:51
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 89.249.195.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 89.249.195.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 10:24:44.884559 2026] [security2:error] [pid 11003:tid 11003] [client 89.249.195.225:37589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/.env.nbcnewsradio"] [unique_id "aWupvNeBxIJqJXdaqgQvZAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-13 09:31:25
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 89.249.195.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 89.249.195.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 04:31:22.180611 2025] [security2:error] [pid 4103:tid 4103] [client 89.249.195.225:35107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/.env.save"] [unique_id "aRWlaj64gXUvW7GwAr5yvwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
RoboSOC
2025-10-16 08:33:08
(11 months ago)
Jolokia Agent JNDI Injection Vulnerability, PTR: PTR record not found
Hacking
🇺🇸
TPI-Abuse
2025-07-03 13:53:10
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.249.195.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 89.249.195.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 03 09:52:32.240918 2025] [security2:error] [pid 27075:tid 27149] [client 89.249.195.225:42867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kettlehill.com"] [uri "/.env.prod.local"] [unique_id "aGaLIPBvk_ICQaNEN8iOwQAAAcY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-29 23:23:30
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.249.195.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 89.249.195.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 19:23:26.794000 2025] [security2:error] [pid 3730893:tid 3730893] [client 89.249.195.225:43809] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.farmers123.com"] [uri "/.env.production"] [unique_id "aDjsbs5PW4ZV4JtvQmJzDAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dayda.net
2025-05-22 09:34:12
(1 year ago)
query: option=com_dwgraphs&controller=../../../../../../../../etc/passwd%00
Bad Web Bot
🇪🇸
Susy Summer
2025-02-27 19:19:00
(1 year ago)
SQLi attempt attack
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2025-02-27 14:53:48
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.249.195.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 89.249.195.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 09:53:14.694180 2025] [security2:error] [pid 27063:tid 27225] [client 89.249.195.225:55941] [client 89.249.195.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.com"] [uri "/.env.live"] [unique_id "Z8B8WsnGgNPGej7DPucMhAAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-01-15 06:10:16
(1 year ago)
| XSS (Cross Site Scripting) attempt.
Hacking
SQL Injection
Web App Attack