2026-07-25 19:15:27
(1 day ago)
"GET /.env HTTP/1.1"
Hacking
Web App Attack
🇩🇪
grassau.com
2026-07-25 08:22:39
(1 day ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 162.33.178.6 (US/Uni ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 162.33.178.6 (US/United States/Illinois/Chicago/-)
show less
Bad Web Bot
2026-07-25 08:00:02
(1 day ago)
suspicious request in access.log
Web App Attack
🇱🇻
garmtech.com
2026-07-25 05:08:41
(2 days ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 04:44:25
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 00:44:20.864970 2026] [security2:error] [pid 490338:tid 490338] [client 162.33.178.6:40916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "321q.com"] [uri "/.env"] [unique_id "amQ_JKRPagD-7DoEsZCrigAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 03:59:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 23:59:49.416919 2026] [security2:error] [pid 3857080:tid 3857080] [client 162.33.178.6:42754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "remote911.net"] [uri "/.env"] [unique_id "amQ0tVaozc_loZU5sia-8gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 03:29:43
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 23:29:38.896008 2026] [security2:error] [pid 13649:tid 13649] [client 162.33.178.6:37468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "praiseworthy.info"] [uri "/.env"] [unique_id "amQtoua7eriDymuoSbK6cgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 02:08:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 22:08:50.272669 2026] [security2:error] [pid 543305:tid 543305] [client 162.33.178.6:60160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ralphharris.org"] [uri "/.env"] [unique_id "amQasr8qCodqob6Tivi32wAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 00:33:01
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 20:32:54.293000 2026] [security2:error] [pid 2973415:tid 2973415] [client 162.33.178.6:47856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virtualmediamasters.net"] [uri "/.env"] [unique_id "amQENs9NI_GhldK0PIfJzQAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 22:32:58
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 18:32:52.528640 2026] [security2:error] [pid 1021155:tid 1021155] [client 162.33.178.6:57180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quinlaneducationfoundation.com"] [uri "/.env"] [unique_id "amPoFO3FmbzL6s5jEdhuKAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 19:40:10
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 15:40:04.728096 2026] [security2:error] [pid 3940295:tid 3940295] [client 162.33.178.6:45222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aangfl.com"] [uri "/.env"] [unique_id "amO_lCb1vTtCtQk9s6_gugAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Valhalla
2026-07-24 19:11:03
(2 days ago)
/.env
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 18:21:38
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 14:21:33.964817 2026] [security2:error] [pid 271017:tid 271017] [client 162.33.178.6:45798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bassboatmagazine.com"] [uri "/.env"] [unique_id "amOtLTIrEzxCPL80wY5WkAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 17:59:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 13:59:40.418013 2026] [security2:error] [pid 451268:tid 451268] [client 162.33.178.6:33864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kittensquid.com"] [uri "/.env"] [unique_id "amOoDAh7m7LOqcWBuKzLTgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 16:40:43
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.33.178.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 12:40:37.040410 2026] [security2:error] [pid 78852:tid 78852] [client 162.33.178.6:49558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jacobunderwoodmusic.com"] [uri "/.env"] [unique_id "amOVhTgul9tAqLIS1OxlgQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack