|
๐ฉ๐ช
EGP Abuse Dept
|
|
Scanning for web/db/file exploits on www.gorissenbv.com
|
SQL Injection
Bad Web Bot
Web App Attack
|
|
|
๐ฆ๐บ
2000cn.com.au
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Web App Attack
Hacking
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 23:28:53.040530 2026] [security2:error] [pid 23882:tid 23882] [client 145.79.58.79:26932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "walkercline.com"] [uri "/app/.env"] [unique_id "aiY29Tz9EFuKnzM1T5r86wAAAB0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐ฌ๐ง
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
|
๐ซ๐ท
masterguru
|
|
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)
|
Hacking
Web App Attack
|
|
|
๐ซ๐ท
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 16:59:18.374659 2026] [security2:error] [pid 11576:tid 11576] [client 145.79.58.79:50990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigislandhawaiicoffee.com"] [uri "/core/.env"] [unique_id "aiXbpkPDijhoMghdNxPLrQAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 15:12:17.363191 2026] [security2:error] [pid 6918:tid 6918] [client 145.79.58.79:59634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "campnecon.com"] [uri "/admin/.env"] [unique_id "aiXCkR8pMYwGZH2239QtOgAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐ฎ๐ช
Jim Keir
|
|
2026-06-07 17:38:36 145.79.58.79 File scanning, blocking 145.79.58.79 for 5 minutes
2026-06-07 17:38 ...
show more
2026-06-07 17:38:36 145.79.58.79 File scanning, blocking 145.79.58.79 for 5 minutes
2026-06-07 17:38:36 145.79.58.79 File scanning, blocking 145.79.58.79 for 5 minutes
2026-06-07 17:38:36 145.79.58.79 File scanning, blocking 145.79.58.79 for 5 minutes
2026-06-07 17:38:36 145.79.58.79 File scanning, blocking 145.79.58.79 for 5 minutes
2026-06-07 17:38:36 145.79.58.79 File scanning, blocking 145.79.58.79 for 5 minutes
2026-06-07 17:38:36 145.79.58.79 File scanning, blocking 145.79.58.79 for 5 minutes
2026-06-07 17:38:36 145.79.58.79 File scanning, blocking 145.79.58.79 for 5 minutes
2026-06-07 17:38:36 145.79.58.79 File scanning, blocking 145.79.58.79 for 5 minutes
2026-06-07 17:38:36 145.79.58.79 File scanning, blocking 145.79.58.79 for 5 minutes
show less
|
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 13:38:24.186948 2026] [security2:error] [pid 11820:tid 11820] [client 145.79.58.79:46988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kaldaragroup.com"] [uri "/admin/.env"] [unique_id "aiWskG7u5J5ZSoSM7bXC9gAAABE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 13:04:44.515267 2026] [security2:error] [pid 962:tid 1063] [client 145.79.58.79:41412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arrowsinthequiver.com"] [uri "/laravel/.env"] [unique_id "aiWkrISfp0zwvZNY8h22hgAAAEo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
(caddyscan) Scanner path probe from 145.79.58.79 (IN/India/-): 5 in the last 3600 secs; Ports: *; Di ...
show more
(caddyscan) Scanner path probe from 145.79.58.79 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 145.79.58.79 - - [07/Jun/2026:16:26:48 +0000] "GET /member/.env HTTP/1.1"
[REDACTED] 200 2627 145.79.58.79 - - [07/Jun/2026:16:26:48 +0000] "GET /core/.env HTTP/1.1"
[REDACTED] 200 2627 145.79.58.79 - - [07/Jun/2026:16:26:48 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 145.79.58.79 - - [07/Jun/2026:16:26:48 +0000] "GET /dev/.env HTTP/1.1"
[REDACTED] 200 2627 145.79.58.79 - - [07/Jun/2026:16:26:48 +0000] "GET /api/.env HTTP/1.1"
show less
|
Port Scan
|
|
|
๐ง๐ท
Halux
|
|
145.79.58.79 Probing protected path or service
|
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 09:26:13.498743 2026] [security2:error] [pid 4020:tid 4020] [client 145.79.58.79:28480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "usaenquirer.com"] [uri "/laravel/.env"] [unique_id "aiVxdUMi5_qRG-ouUpPClQAAABQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 145.79.58.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 08:03:20.119883 2026] [security2:error] [pid 16512:tid 16512] [client 145.79.58.79:36006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drlwr.com"] [uri "/.env"] [unique_id "aiVeCGCnnaTNdbUIlqGc6QAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|