🇺🇸
mnsf
2026-09-01 13:05:49
(8 minutes ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇩🇪
big-cloud.nl
2026-09-01 13:00:26
(13 minutes ago)
Try to access /.env
Web App Attack
🇮🇪
AutosOnShow
2026-09-01 11:28:05
(1 hour ago)
blocked for webapp attack | path requested: / | seen at 2026-09-01 11:27:22.138 |
Web App Attack
🇱🇻
garmtech.com
2026-09-01 11:12:59
(2 hours ago)
Attempted access to sensitive endpoint (/.env.save) detected. Automated scan or unauthorized probing ...
show more
Attempted access to sensitive endpoint (/.env.save) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 10:59:33
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.117.114.168 (168.114.117.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.117.114.168 (168.114.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:59:29.518679 2026] [security2:error] [pid 226452:tid 226469] [client 136.117.114.168:41998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.myrasnyder.com"] [uri "/.env.production"] [unique_id "apawEd8rDBwRmC-l-5gvfwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-09-01 10:19:52
(2 hours ago)
[TueSep0112:19:50.3386372026][security2:error][pid2838660:tid2838895][client136.117.114.168:0]ModSec ...
show more
[TueSep0112:19:50.3386372026][security2:error][pid2838660:tid2838895][client136.117.114.168:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"aeapcl.ch\"][uri\"/.env.old\"][unique_id\"apamxhaiaOu_v5UXOwZv6AAAABM\"]
show less
Hacking
Web App Attack
🇬🇧
consul.to
2026-09-01 09:57:55
(3 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
maxpower
2026-09-01 09:39:54
(3 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 136.117.114.168 (US/United States/168.11 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 136.117.114.168 (US/United States/168.114.117.136.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.117.114.168 - - [01/Sep/2026:11:39:49 +0200] "GET /wp-config.php.bak HTTP/1.1" 200 11949 "-" "crusader-worker/1.0" "-" host=smart-app.cloud
show less
Port Scan
🇬🇧
thetomtaylor.co.uk
2026-09-01 09:17:03
(3 hours ago)
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [mx01,mx02,mx03]
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 08:24:57
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.117.114.168 (168.114.117.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.117.114.168 (168.114.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:24:49.396602 2026] [security2:error] [pid 32683:tid 32683] [client 136.117.114.168:39876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matchstic-branding.com"] [uri "/.env.backup"] [unique_id "apaL0c7TjQKOJ3PPJpZr5QAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
neckaralb-admin.de
2026-09-01 07:10:20
(6 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
2026-09-01 06:31:26
(6 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇪🇸
IT Infraestructura
2026-09-01 06:03:00
(7 hours ago)
Illegal Resource Access Request blocked to URLs: /.env.bak(GET) /.env(GET) /wp-config.php.bak(G ...
show more
Illegal Resource Access Request blocked to URLs: /.env.bak(GET) /.env(GET) /wp-config.php.bak(GET)
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 04:46:10
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.117.114.168 (168.114.117.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.117.114.168 (168.114.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:46:03.101028 2026] [security2:error] [pid 19746:tid 19746] [client 136.117.114.168:33358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howwegothere.info"] [uri "/.env.example"] [unique_id "apZYi2NXzbzukGuJelB--wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-01 04:30:24
(8 hours ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack