๐บ๐ธ
gumbysoft
2026-06-02 08:59:02
(2 days ago)
Unauthorized web vulnerability scan (/.env, wordpress, etc.)
Web App Attack
๐ซ๐ท
ELYAZ
2026-06-02 06:41:58
(2 days ago)
(y3) Failed access -byebye- from 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): (CF_ENABLE)
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-02 02:02:04
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 22:01:59.655320 2026] [security2:error] [pid 14418:tid 14418] [client 2a02:4780:b:2060:0:23a8:34e1:1:61822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "designamb.com"] [uri "/.env"] [unique_id "ah45l23nFF-RQRvyAnswpgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-06-02 01:52:48
(2 days ago)
Try to access /new/.env
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 01:46:10
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 21:46:05.313312 2026] [security2:error] [pid 27235:tid 27235] [client 2a02:4780:b:2060:0:23a8:34e1:1:59992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "livingwaterresortandspa.com"] [uri "/.env"] [unique_id "ah413YmBSylz7dmUg_yz4AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-06-01 23:19:58
(2 days ago)
[TueJun0201:19:36.2330002026][security2:error][pid2972468:tid2972633][client2a02:4780:b:2060:0:23a8: ...
show more
[TueJun0201:19:36.2330002026][security2:error][pid2972468:tid2972633][client2a02:4780:b:2060:0:23a8:34e1:1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"comarcosa.com\"][uri\"/core/.env\"][unique_id\"ah4TiBzo949sfOL8CSyutAAAABY\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 20:31:25
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 16:31:21.674353 2026] [security2:error] [pid 27054:tid 27054] [client 2a02:4780:b:2060:0:23a8:34e1:1:61794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "explorequantumcomputing.com"] [uri "/new/.env"] [unique_id "ah3sGQXLi3sZhR12HoGwsgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 19:01:53
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:949110) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 15:01:48.453558 2026] [security2:error] [pid 13513:tid 13513] [client 2a02:4780:b:2060:0:23a8:34e1:1:48084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "boraborapearlbookings.com"] [uri "/new/.env"] [unique_id "ah3XHHSA0HHFnsJQONlpwgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 17:51:00
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 13:50:52.511720 2026] [security2:error] [pid 30066:tid 30066] [client 2a02:4780:b:2060:0:23a8:34e1:1:21418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcwyo.com"] [uri "/admin/.env"] [unique_id "ah3GfGa8bAojWdpp3w7c7wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 14:55:27
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 10:55:19.251645 2026] [security2:error] [pid 6157:tid 6157] [client 2a02:4780:b:2060:0:23a8:34e1:1:59422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "travelsupersonic.com"] [uri "/.env"] [unique_id "ah2dVxd3gjTsFixqXg_WFgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 13:39:38
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 09:39:33.673829 2026] [security2:error] [pid 27984:tid 27996] [client 2a02:4780:b:2060:0:23a8:34e1:1:63034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "royalfellows.com"] [uri "/app/.env"] [unique_id "ah2LlU7JUvTvRUfWo5tivgAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 12:01:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 08:01:43.437215 2026] [security2:error] [pid 22147:tid 22147] [client 2a02:4780:b:2060:0:23a8:34e1:1:36744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acadianahero.com"] [uri "/dev/.env"] [unique_id "ah10p-tNg3x1Ifeo7kvKEwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 11:35:40
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 07:35:34.960286 2026] [security2:error] [pid 25408:tid 25408] [client 2a02:4780:b:2060:0:23a8:34e1:1:52136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehealthyplaceclayton.com"] [uri "/app/.env"] [unique_id "ah1uhlmfXleX0klKdSvuvwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 09:40:40
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 05:40:31.891751 2026] [security2:error] [pid 9271:tid 9271] [client 2a02:4780:b:2060:0:23a8:34e1:1:56392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teguer.com"] [uri "/new/.env"] [unique_id "ah1TjwYHRxI1QxRV0wL72wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 09:16:51
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:b:2060:0:23a8:34e1:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 05:16:44.432419 2026] [security2:error] [pid 24190:tid 24190] [client 2a02:4780:b:2060:0:23a8:34e1:1:28110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "primacomm.com"] [uri "/member/.env"] [unique_id "ah1N_DVGeLruuwsjGTBQKgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack