๐ฆ๐บ
2000cn.com.au
2026-06-12 17:10:29
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-12 15:22:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 11:22:24.913648 2026] [security2:error] [pid 17570:tid 17570] [client 98.142.15.101:45278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bestnebraskadetective.com"] [uri "/.env"] [unique_id "aiwkMNO2gn2MEgPjNaaYUgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-12 09:05:02
(1 week ago)
suspicious request in access.log
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-12 09:02:16
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 05:02:09.464677 2026] [security2:error] [pid 24874:tid 24874] [client 98.142.15.101:54226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.92"] [uri "/.env"] [unique_id "aivLEeUAUJZjR-zM5sMYngAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-12 08:08:37
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 04:08:33.742351 2026] [security2:error] [pid 9073:tid 9073] [client 98.142.15.101:42182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "berklie.com"] [uri "/.env"] [unique_id "aiu-gXNbvDuC830BpkBWwQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-06-12 05:51:02
(1 week ago)
[FriJun1207:50:58.5347672026][security2:error][pid2906795:tid2907027][client98.142.15.101:0]ModSecur ...
show more
[FriJun1207:50:58.5347672026][security2:error][pid2906795:tid2907027][client98.142.15.101:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.benvenutialfood.ch\"][uri\"/.env\"][unique_id\"aiueQuIU4Li9Z-NVqWRMhgAAAQE\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-12 05:40:12
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 01:40:05.748761 2026] [security2:error] [pid 29880:tid 29880] [client 98.142.15.101:46788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bentonflybox.com"] [uri "/.env"] [unique_id "aiubtT_x6oUe37iMlChePwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-12 05:23:28
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 01:23:21.459501 2026] [security2:error] [pid 11726:tid 11726] [client 98.142.15.101:49032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bentechconstruction.com"] [uri "/.env"] [unique_id "aiuXyZODLUwT8l0p081M8AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-12 04:26:21
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 00:26:13.383645 2026] [security2:error] [pid 8677:tid 8677] [client 98.142.15.101:49312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "benlbrown.com"] [uri "/.env"] [unique_id "aiuKZfKMjt14OploA8Al7QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-12 02:31:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 22:31:34.297511 2026] [security2:error] [pid 20646:tid 20646] [client 98.142.15.101:39946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "benefit-design.com"] [uri "/.env"] [unique_id "aitvhuRynjBFuLN3q9FZLQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-12 01:44:10
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 21:44:05.094985 2026] [security2:error] [pid 16925:tid 16925] [client 98.142.15.101:41610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.benchmarkbcs.com"] [uri "/.env"] [unique_id "aitkZa4iXjCe8bVNdsJYiAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
abenage
2026-06-12 01:19:33
(1 week ago)
98.142.15.101 - - [11/Jun/2026:19:19:31 -0600] "GET /wp-json/wc/store/cart HTTP/2.0" 404 564 "-" "Mo ...
show more
98.142.15.101 - - [11/Jun/2026:19:19:31 -0600] "GET /wp-json/wc/store/cart HTTP/2.0" 404 564 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-12 00:30:14
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 98.142.15.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 20:30:06.812108 2026] [security2:error] [pid 3141:tid 3155] [client 98.142.15.101:59454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beltagin.com"] [uri "/.env"] [unique_id "aitTDlCAl6uUsm6mTZ-98gAAAYs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Mundo Bueno
2026-06-12 00:10:37
(1 week ago)
[ISILIA Protection v2.1] Tentative d'accรจs: /.env | Pays: US | UA: Mozilla/5.0 (Linux; Android 10; K ...
show more
[ISILIA Protection v2.1] Tentative d'accรจs: /.env | Pays: US | UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Sa
show less
Hacking
Web App Attack
๐ฆ๐บ
Block Rockin' Beats
2026-06-11 22:42:05
(1 week ago)
Scanning for exploitable scripts
Hacking
Web App Attack