🇬🇧
openstrike.co.uk
2026-06-21 05:13:35
(10 hours ago)
12 attacks on env grabbing URLs:
GET /api/.env HTTP/1.1
Hacking
🇺🇸
TPI-Abuse
2026-06-20 17:32:35
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 168.76.254.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 168.76.254.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 13:32:28.468638 2026] [security2:error] [pid 21480:tid 21480] [client 168.76.254.75:60798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "russiacoin.info"] [uri "/dash/.env"] [unique_id "ajbOrBKHkGxLJEpO2iiSrAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BiancaNL
2026-06-20 17:19:36
(22 hours ago)
Fail2Ban: jail=nginx-exploit-probes on <fqdn> (port=<port>)
Hacking
🇫🇷
dynamix
2026-06-20 13:41:41
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 13:23:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 168.76.254.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 168.76.254.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 09:22:54.846572 2026] [security2:error] [pid 32062:tid 32062] [client 168.76.254.75:37578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icoinedthewordironesty.com"] [uri "/.env"] [unique_id "ajaULhgrWTq0-hxnfRuvZgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 12:45:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 168.76.254.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 168.76.254.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 08:44:57.000796 2026] [security2:error] [pid 5026:tid 5026] [client 168.76.254.75:50170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cointraptions.com"] [uri "/.env"] [unique_id "ajaLSdUFPAq3pIJLLdA8ngAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
TheCoon
2026-06-20 12:15:01
(1 day ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-20 10:03:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 168.76.254.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 168.76.254.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 06:03:29.975265 2026] [security2:error] [pid 27854:tid 27854] [client 168.76.254.75:53772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crazycoin.net"] [uri "/.env"] [unique_id "ajZlcVOINmsTbVrEFrIehwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 05:49:23
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 168.76.254.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 168.76.254.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 01:49:16.277714 2026] [security2:error] [pid 25877:tid 25877] [client 168.76.254.75:41074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coinbracelet.com"] [uri "/api/.env"] [unique_id "ajYp3IB8_G3cYuyAi7F46AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
EGP Abuse Dept
2026-05-20 12:12:30
(1 month ago)
Unauthorized connection to SSH port 22
Port Scan
Hacking
SSH