Anonymous
2026-10-15 04:34:05
(12 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ฉ๐ช
conseilgouz
2026-10-14 16:25:43
(1 day ago)
sle-17 : Block hidden directories=>/.env2(/)
Hacking
๐ฆ๐บ
2000cn.com.au
2026-10-14 14:42:23
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-14 06:30:17
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.114.145.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.114.145.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 02:30:08.112595 2026] [security2:error] [pid 14343:tid 14343] [client 45.114.145.53:45867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roguetechhub.com"] [uri "/.env2"] [unique_id "as8hcJc23ZJZbpE5miforQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-10-14 05:14:53
(1 day ago)
2 attacks on env grabbing URLs:
GET /server/.env HTTP/1.1
Hacking
๐จ๐ญ
4server
2026-10-14 03:14:22
(1 day ago)
[WedOct1405:14:12.3671012026][security2:error][pid839555:tid839654][client45.114.145.53:0]ModSecurit ...
show more
[WedOct1405:14:12.3671012026][security2:error][pid839555:tid839654][client45.114.145.53:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"reddragonrecords.ch\"][uri\"/.env2\"][unique_id\"as7zhAKLMUX8fbjvjYjCxwAAAJA\"]
show less
Hacking
Web App Attack
๐ฉ๐ช
LRob
2026-10-14 03:09:20
(1 day ago)
Secret file probe | method: GET | path: /mysql/.env | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ...
show more
Secret file probe | method: GET | path: /mysql/.env | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 | 2026-10-14 03:09 UTC
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 03:05:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.114.145.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.114.145.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 23:05:01.217636 2026] [security2:error] [pid 16873:tid 16873] [client 45.114.145.53:50432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reciprodyne.com"] [uri "/mysql/.env"] [unique_id "as7xXfpnPYXyhx3dFtBvlgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
lnklnx
2026-10-14 02:37:17
(1 day ago)
www.rcmeal.com:443 45.114.145.53 - - [13/Oct/2026:21:37:16 -0500] "GET /.env2 HTTP/1.1" 404 6198 "-" ...
show more
www.rcmeal.com:443 45.114.145.53 - - [13/Oct/2026:21:37:16 -0500] "GET /.env2 HTTP/1.1" 404 6198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack
Anonymous
2026-10-14 02:10:04
(1 day ago)
suspicious request in access.log
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-10-14 01:44:08
(1 day ago)
[14/Oct/2026:04:44:07 +0300] -- 45.114.145.53 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET / ...
show more
[14/Oct/2026:04:44:07 +0300] -- 45.114.145.53 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /mysql/.env HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 22:40:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.114.145.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.114.145.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:40:40.158330 2026] [security2:error] [pid 20319:tid 20319] [client 45.114.145.53:40164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "petiteplaisanceconservationfund.org"] [uri "/mysql/.env"] [unique_id "as6zaHMo2_nwGdi9MJi5WwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 20:58:34
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.114.145.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.114.145.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 16:58:26.984402 2026] [security2:error] [pid 24074:tid 24074] [client 45.114.145.53:57227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "partyfavorsonline.com"] [uri "/.env2"] [unique_id "as6bcuFJemcKOpB_O67ZjQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 15:32:41
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 45.114.145.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.114.145.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 11:32:33.031422 2026] [security2:error] [pid 29993:tid 29993] [client 45.114.145.53:52753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nrvoutdoors.net"] [uri "/mysql/.env"] [unique_id "as5PEYeqCAkjCQ5O5h36hwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
gurnip
2026-10-13 15:09:09
(2 days ago)
Vulnerability probe of page /mysql/.env, not found on server.
Brute-Force
Web App Attack