๐บ๐ธ
TPI-Abuse
2026-06-12 12:57:11
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 08:57:04.747699 2026] [security2:error] [pid 23726:tid 23726] [client 104.234.208.100:62263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1healthplace.com"] [uri "/.env"] [unique_id "aiwCIIAAU8X4j_H5ELZzCwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-12 12:38:18
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 08:38:14.823547 2026] [security2:error] [pid 13650:tid 13673] [client 104.234.208.100:56979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ace-es.com"] [uri "/.env"] [unique_id "aiv9tuWk3wvKOTmYC-g55gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฑ๐ป
garmtech.com
2026-06-12 12:17:20
(3 hours ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.env
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-12 11:19:30
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 07:19:26.951608 2026] [security2:error] [pid 13906:tid 13906] [client 104.234.208.100:50765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "contrarianadvisors.com"] [uri "/.env"] [unique_id "aivrPg7grcAUpFvWL-dsfAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-06-12 11:09:02
(4 hours ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [mx01,mx02,mx03]
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-12 10:25:41
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 06:25:33.942606 2026] [security2:error] [pid 2657:tid 2657] [client 104.234.208.100:51519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daytonabluemetallic.com"] [uri "/.env"] [unique_id "aivenaWcMosYrQBiMJJ7RAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-06-12 10:07:01
(5 hours ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-06-12 09:21:08
(6 hours ago)
Login credentials theft attempt
Hacking
๐ง๐ช
cmbplf
2026-06-12 08:34:40
(7 hours ago)
165 requests with url.path *.env
Brute-Force
Bad Web Bot
Anonymous
2026-06-12 00:12:13
(15 hours ago)
104.234.208.100 - - [12/Jun/2026:08:12:02 +0800] "GET /.env HTTP/1.1" 200 30682 "-" "Mozilla/5.0 (Ma ...
show more
104.234.208.100 - - [12/Jun/2026:08:12:02 +0800] "GET /.env HTTP/1.1" 200 30682 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-06-11 19:55:04
(19 hours ago)
Try to access /.env
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-11 19:19:23
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 15:19:20.010588 2026] [security2:error] [pid 31214:tid 31214] [client 104.234.208.100:49425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desoucey.com"] [uri "/.env"] [unique_id "aisKOGL2RKVj8n9p3lUxrAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-11 17:22:36
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 13:22:31.475580 2026] [security2:error] [pid 19953:tid 19953] [client 104.234.208.100:49731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestrestaurants.com"] [uri "/.env"] [unique_id "airu1w8R44mZFRlpOQT3hwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-11 15:23:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 11:23:52.183958 2026] [security2:error] [pid 24403:tid 24442] [client 104.234.208.100:56789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catapultpt.com"] [uri "/.env"] [unique_id "airTCNC1dG46GlAghU1X4AAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-11 14:31:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 10:31:52.748183 2026] [security2:error] [pid 19786:tid 19810] [client 104.234.208.100:53919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "9line-lb.com"] [uri "/.env"] [unique_id "airG2HwX_WZK-5fwtojxYAAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack