🇺🇸
mnsf
2026-08-31 00:06:23
(1 day ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇳🇱
MyGlobalFlowers
2026-08-30 20:56:11
(2 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 20:50:45
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 135.232.183.127 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 135.232.183.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 16:50:42.398624 2026] [security2:error] [pid 11361:tid 11361] [client 135.232.183.127:56905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thejuniverse.org"] [uri "/.env"] [unique_id "apSXojmVtRBCm2OS4r5g-wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-08-30 20:47:31
(2 days ago)
Excessive multi-domain requests
Brute-Force
🇧🇪
voormedia
2026-08-30 20:39:33
(2 days ago)
Accessed trap at '/.env'
Web App Attack
🇳🇱
Savvii
2026-08-30 20:05:18
(2 days ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-08-30 19:47:35
(2 days ago)
Sensitive File Probe
Web App Attack
🇳🇱
Savvii
2026-08-30 19:42:48
(2 days ago)
20 attempts against mh-misbehave-ban on mars
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 19:28:07
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 135.232.183.127 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 135.232.183.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 15:28:02.655608 2026] [security2:error] [pid 18865:tid 18865] [client 135.232.183.127:61994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "civilwarzone.com"] [uri "/.env"] [unique_id "apSEQptjMjAKTMsUJeZgswAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2026-08-30 19:25:18
(2 days ago)
135.232.183.127 - - [30/Aug/2026:21:25:17 +0200] "GET /.env.local HTTP/2.0" 404 15964 "-" "Mozilla/5 ...
show more
135.232.183.127 - - [30/Aug/2026:21:25:17 +0200] "GET /.env.local HTTP/2.0" 404 15964 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/121.0"
135.232.183.127 - - [30/Aug/2026:21:25:18 +0200] "GET /.env.production HTTP/2.0" 404 15964 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"
135.232.183.127 - - [30/Aug/2026:21:25:18 +0200] "GET /.env.example?m=1 HTTP/2.0" 404 15964 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/605.1.15"
...
show less
DDoS Attack
Hacking
🇳🇱
informedclearly.com
2026-08-30 19:03:44
(2 days ago)
WAF_BAN reason=ENV_PROBE rule=ENV_PATH hits=1 path=/.env? ua=Mozilla/5.0 (Windows NT 10.0; Win64; x6 ...
show more
WAF_BAN reason=ENV_PROBE rule=ENV_PATH hits=1 path=/.env? ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
Hacking
🇩🇪
akasolutions.de
2026-08-30 18:54:27
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 135.232.183.127 (US/United States/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-08-30 18:38:45
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 135.232.183.127 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 135.232.183.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 14:38:40.457573 2026] [security2:error] [pid 6380:tid 6380] [client 135.232.183.127:52897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialstudiesforkids.com"] [uri "/.env"] [unique_id "apR4sDK9bslFucxZl-Tr6AAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-08-30 18:36:00
(2 days ago)
IPBlock protected site ID [4055-d][s=06].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 18:20:42
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 135.232.183.127 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 135.232.183.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 14:20:36.418437 2026] [security2:error] [pid 25737:tid 25737] [client 135.232.183.127:57601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "individualhealth.com"] [uri "/.env"] [unique_id "apR0dKhJXPpHRY4at5r6-gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack