🇦🇺
screwlooseit.com.au
2026-05-24 17:29:07
(1 week ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/-
Web App Attack
🇫🇷
dynamix
2026-05-24 17:18:21
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-05-24 17:17:25
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 167.71.246.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 167.71.246.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 13:17:19.079966 2026] [security2:error] [pid 28705:tid 28705] [client 167.71.246.123:51592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sumilondon.com"] [uri "/.env"] [unique_id "ahMyn6V39gRlxIj6a24oMQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇺
conseilgouz
2026-05-24 17:02:44
(1 week ago)
are-17 : Block hidden directories=>/.env(/)
Hacking
🇺🇸
TPI-Abuse
2026-05-24 17:01:50
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 167.71.246.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 167.71.246.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 13:01:42.760935 2026] [security2:error] [pid 11629:tid 11642] [client 167.71.246.123:54586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aafm.us"] [uri "/.env"] [unique_id "ahMu9p2d6UDA4lYxE0Xk_QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-05-24 17:00:55
(1 week ago)
Sensitive File Probe
Web App Attack
🇺🇸
TPI-Abuse
2026-05-24 16:46:41
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 167.71.246.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 167.71.246.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 12:46:34.698910 2026] [security2:error] [pid 11997:tid 12078] [client 167.71.246.123:46868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "okorganicgardening.org"] [uri "/.env"] [unique_id "ahMrao8iUYi9ugGfaKzURQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ddw
2026-05-24 16:38:39
(1 week ago)
Access Violation Attempts - Multiple 403 Forbidden responses.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
mawan
2026-05-24 16:33:18
(1 week ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
TPI-Abuse
2026-05-24 16:31:20
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 167.71.246.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 167.71.246.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 12:31:13.317125 2026] [security2:error] [pid 15833:tid 15833] [client 167.71.246.123:33268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "advantstudio.com"] [uri "/.env"] [unique_id "ahMn0Z-ln_vA0MpvSLXkKQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-24 16:30:51
(1 week ago)
167.71.246.123 - - [24/May/2026:16:30:50 +0000] "GET /.env HTTP/1.1" 404 47613 "-" "Mozilla/5.0 (Lin ...
show more
167.71.246.123 - - [24/May/2026:16:30:50 +0000] "GET /.env HTTP/1.1" 404 47613 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-05-24 16:25:31
(1 week ago)
.env scanning [BY]
Web App Attack
🇺🇦
URAN Publishing Service
2026-05-24 16:16:16
(1 week ago)
167.71.246.123 - - [24/May/2026:19:16:15 +0300] "GET /.env HTTP/1.1" 404 3284 "-" "Mozilla/5.0 (X11; ...
show more
167.71.246.123 - - [24/May/2026:19:16:15 +0300] "GET /.env HTTP/1.1" 404 3284 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
167.71.246.123 - - [24/May/2026:19:16:15 +0300] "GET /.env HTTP/1.1" 404 704 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-24 16:15:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 167.71.246.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 167.71.246.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 12:15:14.436902 2026] [security2:error] [pid 2900:tid 2900] [client 167.71.246.123:58386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joycebrown.com"] [uri "/.env"] [unique_id "ahMkEk7G0K26X9e2LobevAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
afleventoffice.com.au
2026-05-24 09:27:45
(1 week ago)
GET /.env HTTP/1.1
Web App Attack