๐บ๐ธ
TPI-Abuse
2026-06-08 10:08:35
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 06:08:27.850762 2026] [security2:error] [pid 14087:tid 14087] [client 2a02:4780:6:1734:0:151d:33e1:1:26352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "multimediaperformances.com"] [uri "/admin/.env"] [unique_id "aiaUm_SOqF_LiWvgp-A1agAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
Niko's Stuff
2026-06-08 09:13:26
(3 weeks ago)
Triggered crowdsecurity/http-sensitive-files. More information at: https://app.crowdsec.net/cti/2a02 ...
show more
Triggered crowdsecurity/http-sensitive-files. More information at: https://app.crowdsec.net/cti/2a02:4780:6:1734:0:151d:33e1:1
show less
Web App Attack
Hacking
Anonymous
2026-06-07 18:05:07
(4 weeks ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 16:34:41
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 12:34:34.885008 2026] [security2:error] [pid 30483:tid 30483] [client 2a02:4780:6:1734:0:151d:33e1:1:39730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinaffanchufoods.com"] [uri "/core/.env"] [unique_id "aiWdmtgEWTD40eaxP-AaEgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-06 23:58:43
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 19:58:38.837701 2026] [security2:error] [pid 21511:tid 21511] [client 2a02:4780:6:1734:0:151d:33e1:1:22226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brunerdevelopment.com"] [uri "/core/.env"] [unique_id "aiS0LnrxxFS6rMakt9B57gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Swiptly
2026-06-06 21:08:21
(4 weeks ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-06 18:40:41
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 14:40:38.210078 2026] [security2:error] [pid 25684:tid 25684] [client 2a02:4780:6:1734:0:151d:33e1:1:58872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abstractorangemusic.com"] [uri "/core/.env"] [unique_id "aiRppsvhCuF1ehO4Fn5ASwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-06 16:40:51
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 12:40:46.293930 2026] [security2:error] [pid 14987:tid 14987] [client 2a02:4780:6:1734:0:151d:33e1:1:23696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shafoo.com"] [uri "/.env"] [unique_id "aiRNjhVB6pfy1VoEGZAvZQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-06 12:04:13
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 08:04:08.705475 2026] [security2:error] [pid 16622:tid 16622] [client 2a02:4780:6:1734:0:151d:33e1:1:18328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingscruff.com"] [uri "/backend/.env"] [unique_id "aiQMuP0o4vfdGtBF-frLWAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-06 11:47:41
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 07:47:36.158553 2026] [security2:error] [pid 11483:tid 11483] [client 2a02:4780:6:1734:0:151d:33e1:1:41292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prezence.com"] [uri "/dev/.env"] [unique_id "aiQI2ErFK3jDUncxQLL7vQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 13:21:09
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 09:21:01.415846 2026] [security2:error] [pid 2967:tid 2967] [client 2a02:4780:6:1734:0:151d:33e1:1:49418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "djbadger.com"] [uri "/api/.env"] [unique_id "aiAqPc0LlIID1bAQtqh3xgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-06-03 12:54:12
(1 month ago)
[redacted] 2a02:4780:6:1734:0:151d:33e1:1 - - [03/Jun/2026:13:54:11 +0100] "GET /admin/.env HTTP/1.1 ...
show more
[redacted] 2a02:4780:6:1734:0:151d:33e1:1 - - [03/Jun/2026:13:54:11 +0100] "GET /admin/.env HTTP/1.1" 302 5288 0/126033 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" [redacted] 2a02:4780:6:1734:0:151d:33e1:1 - - [03/Jun/2026:13:54:11 +0100] "GET /new/.env HTTP/1.1" 302 5288 0/104011 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" [redacted] 2a02:4780:6:1734:0:151d:33e1:1 - - [03/Jun/2026:13:54:11 +0100] "GET /dev/.env HTTP/1.1" 302 5288 0/94162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-06-03 12:42:16
(1 month ago)
Multiple WAF Violations
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-06-03 12:42:16
(1 month ago)
2a02:4780:6:1734:0:151d:33e1:1 - - [03/Jun/2026:15:42:14 +0300] "GET /dev/.env HTTP/1.1" 404 3303 "- ...
show more
2a02:4780:6:1734:0:151d:33e1:1 - - [03/Jun/2026:15:42:14 +0300] "GET /dev/.env HTTP/1.1" 404 3303 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
2a02:4780:6:1734:0:151d:33e1:1 - - [03/Jun/2026:15:42:14 +0300] "GET /core/.env HTTP/1.1" 404 3303 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 11:01:39
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1734:0:151d:33e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 07:01:34.449472 2026] [security2:error] [pid 12060:tid 12060] [client 2a02:4780:6:1734:0:151d:33e1:1:24476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skulldump.com"] [uri "/new/.env"] [unique_id "aiAJjoiaG1_8i0lD5P8RJgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack