🇺🇸
mnsf
2026-04-06 12:06:20
UTC ·
(7 months ago)
Scanning/Probing (14)
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-04-06 12:04:32
UTC ·
(7 months ago)
Multiple WAF Violations
Web App Attack
🇲🇾
Rizzy
2026-04-06 11:42:56
UTC ·
(7 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 11:39:05
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.6.62 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 07:39:00.761684 2026] [security2:error] [pid 91015:tid 91015] [client 91.234 ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.6.62 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 07:39:00.761684 2026] [security2:error] [pid 91015:tid 91015] [client 91.234.6.62:59879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "csm-dtc.com"] [uri "/app/.env"] [unique_id "adObVCs3vvssSPnD8X471AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-04-06 11:38:40
UTC ·
(7 months ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
Aetherweb Ark
2026-04-06 11:19:29
UTC ·
(7 months ago)
(mod_security) mod_security (id:949110) triggered by 91.234.6.62 (UA/Ukraine/dedicated.vsys.host): N in the last X secs
Web App Attack
🇩🇪
FeG Deutschland
2026-04-06 10:09:38
UTC ·
(7 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 01:30:19
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.6.62 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 21:30:10.826112 2026] [security2:error] [pid 12472:tid 12472] [client 91.234 ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.6.62 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 21:30:10.826112 2026] [security2:error] [pid 12472:tid 12472] [client 91.234.6.62:50655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.therealseska.com"] [uri "/.env.backup"] [unique_id "adMMopcpiH0-JOgGXtAXdwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-04-06 00:58:37
UTC ·
(7 months ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
UA/Ukraine/dedicated.vsys.host
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 23:38:28
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.6.62 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 19:38:20.559748 2026] [security2:error] [pid 11033:tid 11033] [client 91.234 ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.6.62 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 19:38:20.559748 2026] [security2:error] [pid 11033:tid 11033] [client 91.234.6.62:56675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.landscapedesignworkshop.com"] [uri "/.env.backup"] [unique_id "adLybBWbUYrOr5HwROPazAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-04-05 23:01:42
UTC ·
(7 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-04-05 22:19:59
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.6.62 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 18:19:56.362283 2026] [security2:error] [pid 24060:tid 24060] [client 91.234 ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.6.62 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 18:19:56.362283 2026] [security2:error] [pid 24060:tid 24060] [client 91.234.6.62:42519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.darkestdaysclan.com"] [uri "/.env.backup"] [unique_id "adLgDLz4TqTce4H2SmSFYAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-04-05 22:03:26
UTC ·
(7 months ago)
Auto-ban: >3000 req/min op 2026-04-05
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-04-05 22:02:09
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.6.62 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 18:02:04.750645 2026] [security2:error] [pid 27194:tid 27194] [client 91.234 ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.6.62 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 18:02:04.750645 2026] [security2:error] [pid 27194:tid 27194] [client 91.234.6.62:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.c2cservices.com"] [uri "/.env.backup"] [unique_id "adLb3LS9Z8lN5mjzR4_50QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 21:33:19
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.6.62 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 17:33:15.491976 2026] [security2:error] [pid 3540:tid 3540] [client 91.234.6 ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.6.62 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 17:33:15.491976 2026] [security2:error] [pid 3540:tid 3540] [client 91.234.6.62:60735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.acraloc.com"] [uri "/.env.staging"] [unique_id "adLVGwUfWb8xaAHVnmdEGgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack