๐บ๐ธ
TPI-Abuse
2026-06-08 09:04:23
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 05:04:19.785766 2026] [security2:error] [pid 764:tid 764] [client 2a02:4780:13:992:0:1202:eeb4:1:40596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "creativeinteriors.co.com"] [uri "/core/.env"] [unique_id "aiaFk37vA5kwLY8MsZ5nzAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 07:27:21
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 03:27:15.527287 2026] [security2:error] [pid 26694:tid 26694] [client 2a02:4780:13:992:0:1202:eeb4:1:51832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "siciliafamily.com"] [uri "/.env.save"] [unique_id "aiZu0w2Gy4ap_OaKZJQvZgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 06:06:12
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 02:06:06.274047 2026] [security2:error] [pid 11435:tid 11435] [client 2a02:4780:13:992:0:1202:eeb4:1:28750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stbensbluesfest.com"] [uri "/.env.save"] [unique_id "aiZbzo-GXASyJkC1LMpBlQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 05:17:24
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 01:17:19.512326 2026] [security2:error] [pid 10580:tid 10580] [client 2a02:4780:13:992:0:1202:eeb4:1:63940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globalmonitoringinc.com"] [uri "/core/.env"] [unique_id "aiZQXy_qOuroKrbTMt8zIgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-06-08 05:13:34
(2 weeks ago)
12 attacks on env grabbing URLs:
GET /api/.env.save HTTP/1.1
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-08 04:21:55
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 00:21:46.701281 2026] [security2:error] [pid 24306:tid 24306] [client 2a02:4780:13:992:0:1202:eeb4:1:16974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jerusalem-korczak-home.com"] [uri "/.env"] [unique_id "aiZDWjx1sP08qCZPmBEkhQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 03:20:48
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 23:20:44.750879 2026] [security2:error] [pid 27826:tid 27826] [client 2a02:4780:13:992:0:1202:eeb4:1:44146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gmacguffin.com"] [uri "/members/.env"] [unique_id "aiY1DB7iQuBAYlxXvEyj0wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 02:37:35
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 22:37:30.976512 2026] [security2:error] [pid 10837:tid 10906] [client 2a02:4780:13:992:0:1202:eeb4:1:58708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garyjahrig.com"] [uri "/.env"] [unique_id "aiYq6qbkaScq1ZGEsERRAgAAAYY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 23:44:27
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 19:44:19.394269 2026] [security2:error] [pid 13429:tid 13429] [client 2a02:4780:13:992:0:1202:eeb4:1:20118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abundancecompany.com"] [uri "/api/.env"] [unique_id "aiYCU7wMscy0OS7JeV4i9AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 22:16:57
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 18:16:49.167366 2026] [security2:error] [pid 21307:tid 21515] [client 2a02:4780:13:992:0:1202:eeb4:1:22356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wintechltd.com"] [uri "/core/.env.save"] [unique_id "aiXt0bNlvACk3qTtvpHJLgAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob.fr
2026-06-07 20:00:09
(2 weeks ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-07 19:45:20
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 15:45:15.838726 2026] [security2:error] [pid 4244:tid 4244] [client 2a02:4780:13:992:0:1202:eeb4:1:39882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "topgunsecurityservice.com"] [uri "/admin/.env"] [unique_id "aiXKS_AfYLtaMATEryhgDwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 19:26:26
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 15:26:18.713804 2026] [security2:error] [pid 31859:tid 31866] [client 2a02:4780:13:992:0:1202:eeb4:1:22900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "woofnrose.com"] [uri "/backend/.env"] [unique_id "aiXF2kUn0-DnPIX6WSwZvgAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
lakered
2026-06-07 19:18:09
(2 weeks ago)
Detectors: [NGINX, CROWDSEC] | Reasons: CrowdSec: Security alert | Nginx Honeypot: Sensitive configu ...
show more
Detectors: [NGINX, CROWDSEC] | Reasons: CrowdSec: Security alert | Nginx Honeypot: Sensitive configuration file search | Tech Evidence: JA4H: 6ffaa43d4a770afc2f11ca03815de1dc, Incomplete-Browser-Profile (Missing: Accept, Accept-Encoding, Accept-Language), Fake-Chrome-Desktop (No-CH), TLS-JA4-Spoofing-Detected (UA claims Browser but JA4 reports No-HTTP/2: t13d190900), JA4: t13d190900 | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
show less
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-07 17:38:52
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:13:992:0:1202:eeb4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 13:38:47.654735 2026] [security2:error] [pid 14435:tid 14435] [client 2a02:4780:13:992:0:1202:eeb4:1:50660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabbyspetnanny.com"] [uri "/backend/.env"] [unique_id "aiWspw3CaRB62xzNvySLfwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack