๐ณ๐ฑ
e.fierstra
2026-06-27 15:13:36
(2 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-06-27 14:02:32
(3 hours ago)
Login credentials theft attempt
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-27 07:55:08
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:1269:0:16ef:70d4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:1269:0:16ef:70d4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 03:54:57.918256 2026] [security2:error] [pid 850:tid 850] [client 2a02:4780:b:1269:0:16ef:70d4:1:18676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paulomiranda.eu"] [uri "/api/.env"] [unique_id "aj-B0dpwLg2p0dpruzGeZgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
pscriptos
2026-06-27 03:13:07
(14 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
ipblock.com
2026-06-26 23:55:00
(17 hours ago)
IPBlock protected site ID [4055-d][s=03].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Mangelot Hosting
2026-06-26 23:53:02
(17 hours ago)
(modsecurity) srv102 ModSecurity 2a02:4780:b:1269:0:16ef:70d4:1 (US/United States/-): 10 in the last ...
show more
(modsecurity) srv102 ModSecurity 2a02:4780:b:1269:0:16ef:70d4:1 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 18:07:11
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:1269:0:16ef:70d4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:1269:0:16ef:70d4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 14:06:59.305181 2026] [security2:error] [pid 10710:tid 10710] [client 2a02:4780:b:1269:0:16ef:70d4:1:44468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vm-srl.com"] [uri "/members/.env"] [unique_id "aj6_w2eg_VMJuvmNQXNmaQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Buster
2026-06-26 16:15:00
(1 day ago)
Repeated attack attempts from Perm Blocked ASN and country
Brute-Force
Web App Attack
๐ฆ๐บ
nzhost.co.nz
2026-06-26 11:17:41
(1 day ago)
$f2bV_matches
Hacking
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-06-26 10:39:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:1269:0:16ef:70d4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:1269:0:16ef:70d4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 06:39:41.718831 2026] [security2:error] [pid 20179:tid 20179] [client 2a02:4780:b:1269:0:16ef:70d4:1:19688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aktkaro.com"] [uri "/laravel/.env"] [unique_id "aj5W7fOEvloHbdopxjU_yQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 09:21:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:1269:0:16ef:70d4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:1269:0:16ef:70d4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 05:21:17.729310 2026] [security2:error] [pid 32176:tid 32176] [client 2a02:4780:b:1269:0:16ef:70d4:1:34848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scalacopilot.com"] [uri "/backend/.env"] [unique_id "aj5EjQ5sgcU_x6mO8mFxbQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-06-26 07:27:58
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-26 06:44:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:1269:0:16ef:70d4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:1269:0:16ef:70d4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 02:44:42.341171 2026] [security2:error] [pid 18804:tid 18804] [client 2a02:4780:b:1269:0:16ef:70d4:1:28312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "neo-zone.net"] [uri "/backend/.env"] [unique_id "aj4f2uGNzJ3uo7nrLMUTAwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-06-26 05:16:23
(1 day ago)
12 attacks on env grabbing URLs:
GET /members/.env HTTP/1.1
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-26 05:07:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:1269:0:16ef:70d4:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:1269:0:16ef:70d4:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 01:07:26.146326 2026] [security2:error] [pid 29886:tid 29910] [client 2a02:4780:b:1269:0:16ef:70d4:1:57882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mysticscon.com"] [uri "/.env.save"] [unique_id "aj4JDnPdMUY7xIq3OsPi2gAAAVE"]
show less
Brute-Force
Bad Web Bot
Web App Attack