|
๐บ๐ธ
Neil
|
|
Web app attacks.
|
Web App Attack
|
|
|
๐ซ๐ท
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
|
๐ซ๐ท
masterguru
|
|
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)
|
Hacking
Web App Attack
|
|
|
๐บ๐ธ
IndigoRidge
|
|
34.64.239.175 - - [15/Sep/2026:20:02:32 -0400] "GET /.env HTTP/1.1" 404 50939 "https://www.google.co ...
show more
34.64.239.175 - - [15/Sep/2026:20:02:32 -0400] "GET /.env HTTP/1.1" 404 50939 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.1; .NET CLR 3.3.24911; Win64; x64)"
34.64.239.175 - - [15/Sep/2026:20:02:36 -0400] "GET /vendor/.env HTTP/1.1" 404 50939 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.1; .NET CLR 3.3.24911; Win64; x64)"
34.64.239.175 - - [15/Sep/2026:20:02:37 -0400] "GET /lib/.env HTTP/1.1" 404 50939 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.1; .NET CLR 3.3.24911; Win64; x64)"
...
show less
|
Web App Attack
|
|
|
Anonymous
|
|
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.64.239.175 (175.239.64.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.239.175 (175.239.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:31:52.438956 2026] [security2:error] [pid 21783:tid 21783] [client 34.64.239.175:36170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "groomattheinn.com"] [uri "/.env"] [unique_id "aqmdKASyK64UDEDS1_My1QAAABA"], referer: https://www.google.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.64.239.175 (175.239.64.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.239.175 (175.239.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:17:28.986520 2026] [security2:error] [pid 27688:tid 27688] [client 34.64.239.175:50124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "feaverslane.com"] [uri "/.env"] [unique_id "aql9qGgA3gxL6xXzMnJhWQAAAAc"], referer: https://www.google.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.64.239.175 (175.239.64.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.239.175 (175.239.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 11:51:21.596396 2026] [security2:error] [pid 13034:tid 13034] [client 34.64.239.175:50630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "divesfl.com"] [uri "/.env"] [unique_id "aqlpeUS_Yksk_T-RseoS_wAAAAc"], referer: https://www.google.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐ฌ๐ง
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.64.239.175 (175.239.64.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.239.175 (175.239.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:03:08.999569 2026] [security2:error] [pid 14898:tid 14898] [client 34.64.239.175:40112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mainefirst.org"] [uri "/.env"] [unique_id "aqkl7KoAL-UESPczLwwYJgAAAA4"], referer: https://www.google.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|