🇦🇺
paulshipley.com.au
2026-09-02 19:04:15
(1 hour ago)
[Thu Sep 03 05:04:14.778758 2026] [security2:error] [pid 406120] [client 153.52.182.45:54044] [clien ...
show more
[Thu Sep 03 05:04:14.778758 2026] [security2:error] [pid 406120] [client 153.52.182.45:54044] [client 153.52.182.45] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/.env"] [unique_id "aphzLmNNG_Bo67MwvQF0dQAAAAI"]
...
show less
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-02 18:38:57
(1 hour ago)
[02/Sep/2026:21:38:56 +0300] -- 153.52.182.45 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET / ...
show more
[02/Sep/2026:21:38:56 +0300] -- 153.52.182.45 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /.env HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 14:50:06
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 153.52.182.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 153.52.182.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 10:49:58.426209 2026] [security2:error] [pid 14177:tid 14177] [client 153.52.182.45:57623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mooseled.com"] [uri "/.env"] [unique_id "apg3lgSB3x7bl7irxTXY5wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-09-02 14:18:40
(6 hours ago)
[WedSep0216:18:34.1102952026][security2:error][pid4088942:tid4089134][client153.52.182.45:0]ModSecur ...
show more
[WedSep0216:18:34.1102952026][security2:error][pid4088942:tid4089134][client153.52.182.45:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"avvnicolaurbani.ch\"][uri\"/.env\"][unique_id\"apgwOuRiKoFrWyT73EPSQgAAAFE\"]
show less
Hacking
Web App Attack
2026-09-02 14:07:03
(6 hours ago)
Automated web scanner. Requested suspicious paths: /.env. UTC: 2026-09-02 14:06:23.
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-02 11:23:46
(9 hours ago)
[Wed Sep 02 21:23:45.906100 2026] [security2:error] [pid 376523] [client 153.52.182.45:59149] [clien ...
show more
[Wed Sep 02 21:23:45.906100 2026] [security2:error] [pid 376523] [client 153.52.182.45:59149] [client 153.52.182.45] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/.env"] [unique_id "apgHQf6croEnqJC3Bh0E6wAAADM"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-02 09:43:09
(10 hours ago)
[Wed Sep 02 19:43:08.880464 2026] [security2:error] [pid 360140] [client 153.52.182.45:49410] [clien ...
show more
[Wed Sep 02 19:43:08.880464 2026] [security2:error] [pid 360140] [client 153.52.182.45:49410] [client 153.52.182.45] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/.env"] [unique_id "apfvrI3UbCZ3RzxPo5avNAAAAAc"]
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 09:25:54
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 153.52.182.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 153.52.182.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 05:25:47.324701 2026] [security2:error] [pid 14612:tid 14714] [client 153.52.182.45:61471] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.adprospb.com"] [uri "/.env"] [unique_id "apfrm5aWU80ZFftZschQIgAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 09:05:40
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 153.52.182.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 153.52.182.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 05:05:32.769306 2026] [security2:error] [pid 26210:tid 26210] [client 153.52.182.45:64432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.coolwebsites.org"] [uri "/.env"] [unique_id "apfm3Iats53E45OAASZKQAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2026-09-02 04:39:35
(15 hours ago)
Cloudflare WAF: Request Path: /.env Request Query: Host: www.elhacker.net userAgent: Mozilla/5.0 (X ...
show more
Cloudflare WAF: Request Path: /.env Request Query: Host: www.elhacker.net userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Action: block Source: firewallManaged ASN Description: Hyonix Country: US Method: GET Timestamp: 2026-09-02T04:39:35Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-02 04:28:30
(16 hours ago)
[Wed Sep 02 14:28:29.676005 2026] [security2:error] [pid 347323] [client 153.52.182.45:58926] [clien ...
show more
[Wed Sep 02 14:28:29.676005 2026] [security2:error] [pid 347323] [client 153.52.182.45:58926] [client 153.52.182.45] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/.env"] [unique_id "apel7fSoH-QJ9GIowkoh6QAAAAs"]
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 04:22:33
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 153.52.182.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 153.52.182.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:22:25.443015 2026] [security2:error] [pid 26166:tid 26166] [client 153.52.182.45:61657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.midway-island.com"] [uri "/.env"] [unique_id "apekgafpnD21pQT0M4W7vgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-09-02 04:12:21
(16 hours ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 02:54:49
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 153.52.182.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 153.52.182.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:54:43.079227 2026] [security2:error] [pid 12374:tid 12374] [client 153.52.182.45:55431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mathieu.bouville.name"] [uri "/.env"] [unique_id "apeP8yPvWEMiAnR7NT-8agAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 01:01:17
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 153.52.182.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 153.52.182.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 21:01:13.935065 2026] [security2:error] [pid 1145900:tid 1145907] [client 153.52.182.45:55825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fishrapper.com"] [uri "/.env"] [unique_id "apd1WfQNmdebQph0_M6p3AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack