🇳🇱
Alt255
2026-10-13 11:26:39
(9 hours ago)
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.114.145.15 - - [13/Oct/2026:13:26:25 +0200] "GET /.env2 HTTP/1.1" 404 7378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇨🇳
Peter Yu
2026-10-13 08:59:03
(12 hours ago)
Bad Web Bot
Web App Attack
🇺🇸
mw
2026-10-13 00:00:33
(21 hours ago)
GET /server/.env HTTP/1.1
Web App Attack
🇸🇬
securejdprop
2026-10-12 23:55:13
(21 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-env-access.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 19:41:43
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 15:41:36.403332 2026] [security2:error] [pid 27253:tid 27253] [client 45.114.145.15:34427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "losbarbarosdelnorte.com"] [uri "/mysql/.env"] [unique_id "as038EJ1evPvti-wqn1WnAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-10-12 15:23:24
(1 day ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-12 15:02:48
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:02:33.699894 2026] [security2:error] [pid 15968:tid 15968] [client 45.114.145.15:50898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leagueloch.com"] [uri "/mysql/.env"] [unique_id "asz2iZ3VJcovVJdfHKm-8wAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-12 13:41:23
(1 day ago)
[MonOct1215:41:20.5375212026][security2:error][pid3885406:tid3885443][client45.114.145.15:0]ModSecur ...
show more
[MonOct1215:41:20.5375212026][security2:error][pid3885406:tid3885443][client45.114.145.15:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"laketec.ch\"][uri\"/.env2\"][unique_id\"aszjgKzp7lhZSYHghpoW3wAAAEI\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 11:33:48
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 07:33:32.746538 2026] [security2:error] [pid 10914:tid 10914] [client 45.114.145.15:47397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knoxvillelimos.com"] [uri "/.env2"] [unique_id "aszFjB5BAr-KNvR_gULENAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jcbriar
2026-10-12 11:29:10
(1 day ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇩🇪
altenglaner
2026-10-12 10:33:51
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 10:05:47
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 06:05:42.425263 2026] [security2:error] [pid 29315:tid 29315] [client 45.114.145.15:44741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keystonestandard.com"] [uri "/mysql/.env"] [unique_id "asyw9q_daj9AOJpUyZaRWAAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 09:21:47
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:21:42.831485 2026] [security2:error] [pid 10156:tid 10156] [client 45.114.145.15:38525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kaylamaclaincounseling.com"] [uri "/mysql/.env"] [unique_id "asympuDKKWhfUxDhqDJx2QAAAAY"], referer: https://kaylamaclaincounseling.com/mysql/.env
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 07:44:04
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 03:43:55.560559 2026] [security2:error] [pid 14834:tid 14834] [client 45.114.145.15:52041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "julianunplugged.com"] [uri "/.env2"] [unique_id "asyPu-hjObV6G7KkHnxzLgAAAGE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 07:16:34
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.114.145.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 03:16:26.890798 2026] [security2:error] [pid 686:tid 686] [client 45.114.145.15:40494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joycebrown.com"] [uri "/.env2"] [unique_id "asyJSio1Iv6Ek_j6PmnFdwAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
