🇺🇸
mw
2026-09-06 00:00:43
(1 month ago)
GET /.env HTTP/1.1
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 21:03:51
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 17:03:44.648201 2026] [security2:error] [pid 2605:tid 2605] [client 185.213.193.245:51702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "technesa.com"] [uri "/.env"] [unique_id "apyDsLYVxzMa_yt6BrpmTgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 20:44:59
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 16:44:54.492884 2026] [security2:error] [pid 14051:tid 14051] [client 185.213.193.245:38298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sprektech.com"] [uri "/.env"] [unique_id "apx_RonUue7zHMGwSRy0CwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 20:22:10
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 16:22:05.943985 2026] [security2:error] [pid 8308:tid 8308] [client 185.213.193.245:59328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quintechcorp.com"] [uri "/.env"] [unique_id "apx57W9n-Gc1Ec3YwoYOuwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-09-05 20:07:33
(1 month ago)
Try to access /beveiligingstechniek//.env
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 19:58:06
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 15:57:57.860716 2026] [security2:error] [pid 10122:tid 10122] [client 185.213.193.245:48618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nashtechnologies.net"] [uri "/.env"] [unique_id "apx0RbITRwACib_H8ZqNowAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-05 19:52:10
(1 month ago)
[ns19.kdns.gr] httpd-config-scan: sites=www.microtech.com.cy; logs=/var/log/httpd/domains/microtech. ...
show more
[ns19.kdns.gr] httpd-config-scan: sites=www.microtech.com.cy; logs=/var/log/httpd/domains/microtech.com.cy.log; samples=/.env
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 19:11:06
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 15:11:01.157352 2026] [security2:error] [pid 26009:tid 26009] [client 185.213.193.245:59178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hometechllc.com"] [uri "/.env"] [unique_id "apxpRSY80J4VB9Y4SwvWRwAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
gigatech
2026-09-05 19:00:04
(1 month ago)
Webserver Probing
Web App Attack
2026-09-05 18:54:48
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 18:48:10
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 14:48:05.259482 2026] [security2:error] [pid 19424:tid 19464] [client 185.213.193.245:55978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fibertechsystems.com"] [uri "/.env"] [unique_id "apxj5aG3z14CBcOEnXVR-AAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
SkyDancer
2026-09-05 18:43:55
(1 month ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-09-05 18:29:40
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 14:29:36.481618 2026] [security2:error] [pid 21735:tid 21735] [client 185.213.193.245:54000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digitaldatatechnologies.net"] [uri "/.env"] [unique_id "apxfkGmaewcfUNldE5HmFQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 18:09:59
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.213.193.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 14:09:54.688395 2026] [security2:error] [pid 32124:tid 32124] [client 185.213.193.245:53814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "braintechsoftwaresolutions.com"] [uri "/.env"] [unique_id "apxa8oDi-vCKP5RIUbvSCAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-09-05 18:00:59
(1 month ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking