🇫🇷
dwmp
2026-08-01 17:24:12
(2 hours ago)
Url probing: /.env.production
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 17:22:39
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.85.39.108 (108.39.85.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.85.39.108 (108.39.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:22:31.568946 2026] [security2:error] [pid 4092110:tid 4092110] [client 136.85.39.108:56616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.zezel.com.casagrotto.com"] [uri "/.env.production"] [unique_id "am4rV2waPkBA1yoFsJnVHwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-08-01 17:15:19
(2 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 17:06:51
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.85.39.108 (108.39.85.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.85.39.108 (108.39.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:06:44.483726 2026] [security2:error] [pid 2009362:tid 2009362] [client 136.85.39.108:33200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "palumbodesigns.com"] [uri "/.env.example"] [unique_id "am4npHhBJZu7rBX2vrxxbgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-08-01 17:05:20
(2 hours ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇩🇪
ger-stg-sifi1
2026-08-01 16:48:52
(2 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 16:39:01
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.85.39.108 (108.39.85.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.85.39.108 (108.39.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:38:57.722047 2026] [security2:error] [pid 1919791:tid 1919791] [client 136.85.39.108:54192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawkeyeibp.com.thinkingepic.com"] [uri "/.env.save"] [unique_id "am4hIYULUfFlrpG5EBCNUgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-01 16:20:06
(3 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-01 16:19:51
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.85.39.108 (108.39.85.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.85.39.108 (108.39.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:19:43.475560 2026] [security2:error] [pid 2478595:tid 2478595] [client 136.85.39.108:37316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solidthought.com"] [uri "/.env.bak"] [unique_id "am4cn6l5OX_PlwX2odOBdQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-08-01 15:51:15
(3 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
2026-08-01 15:40:22
(4 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
2026-08-01 15:17:18
(4 hours ago)
Web application attack detected.
Web App Attack
🇫🇷
masterguru
2026-08-01 15:16:53
(4 hours ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 136.85.39.108 (SG/Singapore/108.39.85 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 136.85.39.108 (SG/Singapore/108.39.85.136.bc.googleusercontent.com): 2 in the last 3600 secs (0-196)
show less
Hacking
2026-08-01 14:45:03
(5 hours ago)
suspicious request in access.log
Web App Attack
🇨🇭
4server
2026-08-01 13:40:02
(6 hours ago)
[SatAug0115:39:55.9307562026][security2:error][pid3677611:tid3677686][client136.85.39.108:0]ModSecur ...
show more
[SatAug0115:39:55.9307562026][security2:error][pid3677611:tid3677686][client136.85.39.108:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"swiss-domain-name.aidconsultancy.ch\"][uri\"/.env.local\"][unique_id\"am33K8IA7fw1yrZYy_zsmwAAAco\"]
show less
Hacking
Web App Attack