Anonymous
2026-04-21 22:07:13
(5 months ago)
2a02:4780:75:1f7b::1 - - [21/Apr/2026:22:07:12 +0000] "GET /.env HTTP/1.1" 302 529 "-" "Mozilla/5.0 ...
show more
2a02:4780:75:1f7b::1 - - [21/Apr/2026:22:07:12 +0000] "GET /.env HTTP/1.1" 302 529 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-04-21 21:59:56
(5 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-20.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-04-21 21:33:16
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 17:33:12.089629 2026] [security2:error] [pid 622329:tid 622329] [client 2a02:4780:75:1f7b::1:59040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mwtemperature.com"] [uri "/.git/HEAD"] [unique_id "aeftGKBxdsu2zBMvfsN2agAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-21 13:50:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 09:50:18.560183 2026] [security2:error] [pid 3979585:tid 3979585] [client 2a02:4780:75:1f7b::1:48858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "minetterisquez.com"] [uri "/.env.production"] [unique_id "aeeAmrwNpO-fOaecL7CBgAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
LRNP
2026-04-21 13:02:02
(6 months ago)
mirror2.urbanterror.info:443 2a02:4780:75:1f7b::1 - - [21/Apr/2026:13:02:02 +0000] "GET /.env HTTP/1 ...
show more
mirror2.urbanterror.info:443 2a02:4780:75:1f7b::1 - - [21/Apr/2026:13:02:02 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-21 12:50:41
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 08:50:33.742133 2026] [security2:error] [pid 200441:tid 200441] [client 2a02:4780:75:1f7b::1:60868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelgatley.com"] [uri "/.git/HEAD"] [unique_id "aedymX53UKg5m9OpL7-wyQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-21 12:33:04
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 08:32:58.267811 2026] [security2:error] [pid 2200238:tid 2200238] [client 2a02:4780:75:1f7b::1:53392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mhservice.mayan.abecasis.com"] [uri "/.env.production"] [unique_id "aeduegD_0zVXynySHofYxgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-21 12:02:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 08:02:21.023906 2026] [security2:error] [pid 506190:tid 506190] [client 2a02:4780:75:1f7b::1:33178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michelle.mathewyoung.com"] [uri "/.env.production"] [unique_id "aednTcLtGIzoMLLcywVYhAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-21 11:45:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 07:45:27.896898 2026] [security2:error] [pid 3262:tid 3262] [client 2a02:4780:75:1f7b::1:56076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miroconsulting.es"] [uri "/.env.local"] [unique_id "aedjV_7JR-oP41OUIsUazgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-21 11:21:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 07:21:32.951538 2026] [security2:error] [pid 1563278:tid 1563278] [client 2a02:4780:75:1f7b::1:58186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelprussin.com"] [uri "/.git/HEAD"] [unique_id "aeddvBMxeXzEjQHmtCjoqAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-21 10:48:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 06:48:50.159075 2026] [security2:error] [pid 945404:tid 945404] [client 2a02:4780:75:1f7b::1:60010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miranda-race-walks.com"] [uri "/.git/HEAD"] [unique_id "aedWErrckUPfsP7tBAARYwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-21 09:52:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 05:52:38.250228 2026] [security2:error] [pid 2831413:tid 2831556] [client 2a02:4780:75:1f7b::1:36232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "minutosrobados.com"] [uri "/.env.production"] [unique_id "aedI5l-_C7whQ3YgRST7gAAAAgg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
on-com
2026-04-21 03:48:56
(6 months ago)
URL scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-21 02:37:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:1f7b::1 (srv1602718.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 22:37:44.856739 2026] [security2:error] [pid 1369271:tid 1369271] [client 2a02:4780:75:1f7b::1:48752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clipper1970.com.jimgrenier.com"] [uri "/.git/HEAD"] [unique_id "aebi-LiWuhHhxc8_OJygSgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-04-21 02:27:59
(6 months ago)
126 requests with url.path *.env
Brute-Force
Bad Web Bot