๐ซ๐ท
SpaceHost-Server
2026-06-08 22:28:56
(1 week ago)
Brute-Force
Web App Attack
๐ณ๐ฑ
BlueWire Hosting
2026-06-08 10:14:38
(1 week ago)
Probing websites for vulnerabilities
Web App Attack
๐ฆ๐บ
aranguren.org
2026-06-08 08:11:34
(1 week ago)
2a02:4780:a:490:0:3129:ee4f:1 - - [08/Jun/2026:18:11:33 +1000] "GET /core/.env HTTP/1.1" 404 985 "-" ...
show more
2a02:4780:a:490:0:3129:ee4f:1 - - [08/Jun/2026:18:11:33 +1000] "GET /core/.env HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
2a02:4780:a:490:0:3129:ee4f:1 - - [08/Jun/2026:18:11:33 +1000] "GET /dev/.env HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
2a02:4780:a:490:0:3129:ee4f:1 - - [08/Jun/2026:18:11:33 +1000] "GET /.env HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
2a02:4780:a:490:0:3129:ee4f:1 - - [08/Jun/2026:18:11:33 +1000] "GET /api/.env HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
2a02:4780:a:490:0:3129:ee4f:1 - - [08/Jun/2026:18:11:33 +1000] "GET /member/.env HTTP/1.1" 404 985 "-" "Moz
...
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-08 07:14:49
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 03:14:40.630204 2026] [security2:error] [pid 27279:tid 27279] [client 2a02:4780:a:490:0:3129:ee4f:1:34902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "computerpartsrecovery.com"] [uri "/.env"] [unique_id "aiZr4ADmpn5rjhCVLK8-wAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 06:08:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 02:08:24.129642 2026] [security2:error] [pid 30190:tid 30190] [client 2a02:4780:a:490:0:3129:ee4f:1:40012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sdwsk8.com"] [uri "/backend/.env"] [unique_id "aiZcWPrYkahS0xI5gcJo8QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 02:07:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 22:07:27.198399 2026] [security2:error] [pid 17809:tid 17809] [client 2a02:4780:a:490:0:3129:ee4f:1:58918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soleillavie.com"] [uri "/dev/.env"] [unique_id "aiYj3-pJ0thaEq_j_0Q9WQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
Niko's Stuff
2026-06-07 23:50:43
(1 week ago)
Triggered crowdsecurity/http-sensitive-files. More information at: https://app.crowdsec.net/cti/2a02 ...
show more
Triggered crowdsecurity/http-sensitive-files. More information at: https://app.crowdsec.net/cti/2a02:4780:a:490:0:3129:ee4f:1
show less
Web App Attack
Hacking
๐ซ๐ท
SpaceHost-Server
2026-06-07 22:27:52
(1 week ago)
Brute-Force
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-07 22:03:15
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-06.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-07 21:49:55
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 17:49:48.965365 2026] [security2:error] [pid 9296:tid 9296] [client 2a02:4780:a:490:0:3129:ee4f:1:54292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "midnight-tech.com"] [uri "/backend/.env"] [unique_id "aiXnfB6zi6gCm96xVzdKUgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
webko.si
2026-06-07 19:24:49
(1 week ago)
BARUTANA.si: Bruteforce web app access, URI detail: '/backend/.env'.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 19:10:30
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 15:10:27.910135 2026] [security2:error] [pid 21433:tid 21433] [client 2a02:4780:a:490:0:3129:ee4f:1:42656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carreramoldesymatrices.com"] [uri "/api/.env"] [unique_id "aiXCI_cw_ckDoRzQtjtDXwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 18:49:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 14:49:24.925378 2026] [security2:error] [pid 4687:tid 4687] [client 2a02:4780:a:490:0:3129:ee4f:1:32230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "engravedweddingflutes.com"] [uri "/core/.env"] [unique_id "aiW9NJvKu_nadqoWd_eUMwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-06-07 17:27:40
(1 week ago)
Try to access /member/.env
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 17:12:54
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:a:490:0:3129:ee4f:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 13:12:47.535335 2026] [security2:error] [pid 29446:tid 29446] [client 2a02:4780:a:490:0:3129:ee4f:1:28768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dkdesign.click"] [uri "/.env"] [unique_id "aiWmjygr9P-rbV0vOWD39AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack