๐ซ๐ท
masterguru
2026-08-01 14:50:06
(15 minutes ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-01 14:49:41
(16 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.87.247.0 (0.247.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.247.0 (0.247.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:49:36.693169 2026] [security2:error] [pid 750529:tid 750529] [client 34.87.247.0:38350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.octozonehealth.mroxygen.org"] [uri "/.env.dev"] [unique_id "am4HgHu1C436nMCeAHs_bAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-01 14:32:33
(33 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.87.247.0 (0.247.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.247.0 (0.247.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:32:26.729524 2026] [security2:error] [pid 561613:tid 561624] [client 34.87.247.0:48780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icecc.com"] [uri "/.env.production"] [unique_id "am4DeouaOtnbGhbsEq2JXAAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-01 14:10:38
(55 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.87.247.0 (0.247.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.247.0 (0.247.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:10:33.811378 2026] [security2:error] [pid 480651:tid 480651] [client 34.87.247.0:55614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "panesarlaw.com"] [uri "/.env.local"] [unique_id "am3-WcVu0VEyfJYI1ddwFgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-08-01 14:05:20
(1 hour ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
Anonymous
2026-08-01 13:55:05
(1 hour ago)
suspicious request in access.log
Web App Attack
Anonymous
2026-08-01 13:44:02
(1 hour ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
Anonymous
2026-08-01 13:26:03
(1 hour ago)
Bot / scanning and/or hacking attempts: GET /.env.old HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.pr ...
show more
Bot / scanning and/or hacking attempts: GET /.env.old HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env HTTP/1.1
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-01 13:22:08
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.87.247.0 (0.247.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.247.0 (0.247.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 09:22:00.211930 2026] [security2:error] [pid 773353:tid 773353] [client 34.87.247.0:56100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindtekt.com.aquasafedemo.com"] [uri "/.env"] [unique_id "am3y-FPtDLzkIYNq_yzH4QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-08-01 13:14:56
(1 hour ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-08-01 12:59:11
(2 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
๐ฉ๐ช
seal
2026-08-01 12:48:54
(2 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
SSH
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-08-01 12:46:44
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.87.247.0 (0.247.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.247.0 (0.247.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 08:46:38.444103 2026] [security2:error] [pid 9155:tid 9155] [client 34.87.247.0:46936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rgtripane.kmelson.com"] [uri "/.env.production"] [unique_id "am3qrrzrS_WOrRTPy1TkaQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-08-01 12:43:53
(2 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ธ๐ช
vaia.cloud
2026-08-01 12:35:01
(2 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack