🇺🇸
TPI-Abuse
2026-06-12 11:16:39
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 07:16:33.132423 2026] [security2:error] [pid 31454:tid 31454] [client 2602:fa59:10:2ef::1:31714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrobertsignaturehomes.com"] [uri "/.env"] [unique_id "aivqkbCxhIBm3IefS6LG6QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
juutis
2026-06-12 08:13:19
(4 months ago)
Multiple WAF abuses - IP blocked
Hacking
Brute-Force
Web App Attack
🇬🇧
foxxelabs
2026-06-12 06:02:23
(4 months ago)
Automated report from FoxxeLabs Sentinel. Path probed: /.env | Project: taca | Reason(s): Known expl ...
show more
Automated report from FoxxeLabs Sentinel. Path probed: /.env | Project: taca | Reason(s): Known exploit path: /.env; AbuseIPDB score: 75/100 | User-Agent: Go-http-client/2.0
show less
Web App Attack
🇩🇪
betternews.app
2026-06-12 01:31:45
(4 months ago)
"a web request contained keyword ".env"; Suspicious URL: /.env"
Web Spam
Blog Spam
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Viveronese
2026-06-12 00:06:02
(4 months ago)
HTTP vulnerability scanning
Web App Attack
🇩🇪
tall1oN
2026-06-11 23:47:40
(4 months ago)
2602:fa59:10:2ef::1 - - [12/Jun/2026:01:47:39 +0200] "GET /.env HTTP/2.0" 200 1684 "-" "Go-http-clie ...
show more
2602:fa59:10:2ef::1 - - [12/Jun/2026:01:47:39 +0200] "GET /.env HTTP/2.0" 200 1684 "-" "Go-http-client/2.0" "exatek.de"
2602:fa59:10:2ef::1 - - [12/Jun/2026:01:47:40 +0200] "GET /.env HTTP/2.0" 200 1684 "http://exatek.de:80/.env" "Go-http-client/2.0" "exatek.de"
...
show less
Web App Attack
Port Scan
Hacking
🇳🇱
e.fierstra
2026-06-11 21:34:16
(4 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇦🇹
René Hickersberger
2026-06-11 19:01:50
(4 months ago)
malicious bot detected: violations="hit-honeypot"; user_agent="Go-http-client/2.0"
Web App Attack
🇫🇷
[email protected]
2026-06-11 13:25:54
(4 months ago)
PrestaShop Security Module: Suspicious path detected (/.git)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 11:43:40
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 07:43:33.163663 2026] [security2:error] [pid 6729:tid 6729] [client 2602:fa59:10:2ef::1:55054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.uhrmazhi.com.greighhouse.com"] [uri "/.env"] [unique_id "aiqfZdHVnwiJnA9f_H6k2wAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Kinsei Engineering Inc.
2026-06-11 11:42:08
(4 months ago)
2026/06/11 20:42:07 [error] 188062#188062: *43461 access forbidden by rule, client: 2602:fa59:10:2ef ...
show more
2026/06/11 20:42:07 [error] 188062#188062: *43461 access forbidden by rule, client: 2602:fa59:10:2ef::1, server: www.kinsei.jp, request: "GET /.env HTTP/2.0", host: "www.kinsei.jp", referrer: "https://kinsei.jp/.env"
2026/06/11 20:42:07 [error] 188059#188059: *43462 access forbidden by rule, client: 2602:fa59:10:2ef::1, server: www.kinsei.jp, request: "GET /.env HTTP/2.0", host: "www.kinsei.jp", referrer: "https://kinsei.jp:443/.env"
2026/06/11 20:42:07 [error] 188062#188062: *43461 access forbidden by rule, client: 2602:fa59:10:2ef::1, server: www.kinsei.jp, request: "GET /.git/HEAD HTTP/2.0", host: "www.kinsei.jp", referrer: "https://kinsei.jp:443/.git/HEAD"
show less
Brute-Force
Web Spam
🇨🇦
Not Fake
2026-06-11 06:25:03
(4 months ago)
$f2bV_matches
Web App Attack
🇵🇱
sefinek.net
2026-06-11 04:26:55
(4 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (GET ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (GET) | Endpoint: / | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇹
René Hickersberger
2026-06-10 01:07:20
(4 months ago)
malicious bot detected: violations="hit-honeypot"; user_agent="Go-http-client/2.0"
Web App Attack
🇧🇪
cmbplf
2026-06-09 22:52:48
(4 months ago)
151 requests with url.path *.git/*
Brute-Force
Bad Web Bot
