๐ง๐ช
cmbplf
2026-06-12 11:03:24
(11 hours ago)
403 requests with url.path *.env
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-12 07:48:17
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 03:48:13.619408 2026] [security2:error] [pid 30217:tid 30217] [client 2a02:4780:c:b55e::1:44740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chavarri.com"] [uri "/core/.env.save"] [unique_id "aiu5vYP4t1Peh4u0pJDLpwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-12 03:58:30
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 23:58:24.085117 2026] [security2:error] [pid 10126:tid 10126] [client 2a02:4780:c:b55e::1:33384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "add-a-heading.xyz"] [uri "/dev/.env"] [unique_id "aiuD4Eg0g5i3R8PKF17fEwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-06-10 05:10:32
(2 days ago)
[WedJun1007:10:26.2824712026][security2:error][pid4037542:tid4037628][client2a02:4780:c:b55e::1:0]Mo ...
show more
[WedJun1007:10:26.2824712026][security2:error][pid4037542:tid4037628][client2a02:4780:c:b55e::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"archi-box.ch\"][uri\"/core/.env.save\"][unique_id\"aijxwo0rY-ShHxy0ue-VAwAAAEk\"]
show less
Port Scan
Brute-Force
Web App Attack
๐จ๐ญ
4server
2026-06-10 04:24:02
(2 days ago)
[WedJun1006:23:55.6432552026][security2:error][pid359550:tid359811][client2a02:4780:c:b55e::1:0]ModS ...
show more
[WedJun1006:23:55.6432552026][security2:error][pid359550:tid359811][client2a02:4780:c:b55e::1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"4host.biz\"][uri\"/dev/.env\"][unique_id\"aijm2_-MNssIu-ONsuYZRQAAAQ8\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 20:26:44
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 16:26:40.493800 2026] [security2:error] [pid 7563:tid 7563] [client 2a02:4780:c:b55e::1:53772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4windsmedia.com"] [uri "/.env"] [unique_id "aih3AOvwMzQo6KgsvR539wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 18:58:15
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 14:58:09.714188 2026] [security2:error] [pid 10440:tid 10444] [client 2a02:4780:c:b55e::1:36540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casademontemaior.com"] [uri "/.env"] [unique_id "aihiQRMZ6BOmcW61ddoYFgAAAUI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
N3ilawx
2026-06-09 18:41:27
(3 days ago)
Fail2Ban detect something wrong with this ip 2a02:4780:c:b55e::1 - GET - 404 - [09/Jun/2026:20:41:23 ...
show more
Fail2Ban detect something wrong with this ip 2a02:4780:c:b55e::1 - GET - 404 - [09/Jun/2026:20:41:23 +0200]
2a02:4780:c:b55e::1 - GET - 404 - [09/Jun/2026:20:41:24 +0200]
2a02:4780:c:b55e::1 - GET - 404 - [09/Jun/2026:20:41:24 +0200]
2a02:4780:c:b55e::1 - GET - 404 - [09/Jun/2026:20:41:24 +0200]
2a02:4780:c:b55e::1 - GET - 404 - [09/Jun/2026:20:41:25 +0200]
2a02:4780:c:b55e::1 - GET - 404 - [09/Jun/2026:20:41:25 +0200]
2a02:4780:c:b55e::1 - GET - 404 - [09/Jun/2026:20:41:26 +0200]
2a02:4780:c:b55e::1 - GET - 404 - [09/Jun/2026:20:41:26 +0200]
2a02:4780:c:b55e::1 - GET - 404 - [09/Jun/2026:20:41:26 +0200]
2a02:4780:c:b55e::1 - GET - 404 - [09/Jun/2026:20:41:26 +0200]
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 15:11:29
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:11:24.915278 2026] [security2:error] [pid 31021:tid 31021] [client 2a02:4780:c:b55e::1:47226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accinternational.net"] [uri "/admin/.env"] [unique_id "aigtHMziUDz3uZDRF-0IyQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 13:53:06
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:53:02.899487 2026] [security2:error] [pid 29884:tid 29884] [client 2a02:4780:c:b55e::1:48192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bowerwood.com"] [uri "/backend/.env"] [unique_id "aigavlw7IdReoeZ74Oak_gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 12:34:37
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:34:33.616134 2026] [security2:error] [pid 22087:tid 22087] [client 2a02:4780:c:b55e::1:45226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aluthienproperties.com"] [uri "/app/.env"] [unique_id "aigIWSE7ehIzds9BxUmltwAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 12:00:45
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:00:41.777980 2026] [security2:error] [pid 17731:tid 17734] [client 2a02:4780:c:b55e::1:50562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casino.blog"] [uri "/api/.env.save"] [unique_id "aigAaWzFNsvuuznmimQKRQAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 09:20:16
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:20:11.538583 2026] [security2:error] [pid 3810:tid 3810] [client 2a02:4780:c:b55e::1:49672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "akmanoto.com"] [uri "/core/.env.save"] [unique_id "aifay9QGCN67TmCO7nCwxQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
itsolon
2026-06-09 09:02:52
(3 days ago)
[09/Jun/2026:09:56:25 +0200] 178099178534.732966 2a02:4780:c:b55e::1 0 217.154.7.177 443
[09/Jun/202 ...
show more
[09/Jun/2026:09:56:25 +0200] 178099178534.732966 2a02:4780:c:b55e::1 0 217.154.7.177 443
[09/Jun/2026:09:56:25 +0200] 178099178531.037108 2a02:4780:c:b55e::1 0 217.154.7.177 443
[09/Jun/2026:09:56:27 +0200] 178099178741.790340 2a02:4780:c:b55e::1 0 217.154.7.177 443
[09/Jun/2026:09:56:27 +0200] 178099178767.179458 2a02:4780:c:b55e::1 0 217.154.7.177 443
[09/Jun/2026:09:56:27 +0200] 178099178760.388490 2a02:4780:c:b55e::1 0 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 07:38:20
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:c:b55e::1 (srv927443.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:38:17.394788 2026] [security2:error] [pid 4950:tid 4950] [client 2a02:4780:c:b55e::1:41900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aicoursefactory.com"] [uri "/core/.env.save"] [unique_id "aifC6Q8bf5N_lk352s-36AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack