๐ง๐ท
Peregrine
2026-06-18 03:11:00
(15 hours ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 204.51.34.1 162.158.88.101 - - [10/Jun/2026:07:31:53 - ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 204.51.34.1 162.158.88.101 - - [10/Jun/2026:07:31:53 -0300] "GET /.env HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-06-16 03:12:23
(2 days ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 204.51.34.1 162.158.88.101 - - [10/Jun/2026:07:31:53 - ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 204.51.34.1 162.158.88.101 - - [10/Jun/2026:07:31:53 -0300] "GET /.env HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-06-15 03:10:58
(3 days ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 204.51.34.1 162.158.88.101 - - [10/Jun/2026:07:31:53 - ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 204.51.34.1 162.158.88.101 - - [10/Jun/2026:07:31:53 -0300] "GET /.env HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-06-13 03:11:44
(5 days ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 204.51.34.1 162.158.88.101 - - [10/Jun/2026:07:31:53 - ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 204.51.34.1 162.158.88.101 - - [10/Jun/2026:07:31:53 -0300] "GET /.env HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-06-12 03:10:37
(6 days ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 204.51.34.1 162.158.88.101 - - [10/Jun/2026:07:31:53 - ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 204.51.34.1 162.158.88.101 - - [10/Jun/2026:07:31:53 -0300] "GET /.env HTTP/1.1" 404 414
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-10 23:16:56
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 204.51.34.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 204.51.34.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 19:16:48.503484 2026] [security2:error] [pid 30799:tid 30799] [client 204.51.34.1:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.barryherbach.com"] [uri "/.env"] [unique_id "ainwYJQVSZdW9DJXWj5YnAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-10 21:08:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 204.51.34.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 204.51.34.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 17:08:09.498493 2026] [security2:error] [pid 7677:tid 7677] [client 204.51.34.1:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.mail-pmg.com"] [uri "/.env"] [unique_id "ainSOQuomLrkmmuCHprxRQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Gwyneth Llewelyn
2026-06-10 14:29:31
(1 week ago)
204.51.34.1 - - [10/Jun/2026:15:29:27 +0100] "GET /.env HTTP/2.0" 404 994 "-" "Python/3.13 aiohttp/3 ...
show more
204.51.34.1 - - [10/Jun/2026:15:29:27 +0100] "GET /.env HTTP/2.0" 404 994 "-" "Python/3.13 aiohttp/3.13.3"
2026/06/10 15:29:29 [error] 1929836#1929836: *853579 access forbidden by rule, client: 204.51.34.1, server: lisboa.betatechnologies.info, request: "GET /.env HTTP/2.0", host: "lisboa.betatechnologies.info"
204.51.34.1 - - [10/Jun/2026:15:29:29 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Python/3.13 aiohttp/3.13.3"
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-10 10:56:10
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 204.51.34.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 204.51.34.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 06:56:07.430181 2026] [security2:error] [pid 11934:tid 11934] [client 204.51.34.1:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.hollyranch.com"] [uri "/.env"] [unique_id "ailCx7eJ-BXzWkoLwSjm2AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
Peregrine
2026-06-10 10:31:56
(1 week ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 204.51.34.1 162.158.88.101 - - [10/Jun/2026:07:31:53 - ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 204.51.34.1 162.158.88.101 - - [10/Jun/2026:07:31:53 -0300] "GET /.env HTTP/1.1" 404 414
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-10 09:48:34
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 204.51.34.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 204.51.34.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 05:48:28.931702 2026] [security2:error] [pid 4589:tid 4589] [client 204.51.34.1:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kidswithcamerasmovie.com"] [uri "/.env"] [unique_id "aiky7BVCfhvCS4207xH3RgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฑ๐ป
garmtech.com
2026-06-10 09:34:09
(1 week ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.env
Web App Attack