2026-09-02 02:43:26
(1 week ago)
51.89.204.81 - - [02/Sep/2026:10:43:25 +0800] "GET /.env HTTP/1.1" 301 232 "-" "python-requests/2.28 ...
show more
51.89.204.81 - - [02/Sep/2026:10:43:25 +0800] "GET /.env HTTP/1.1" 301 232 "-" "python-requests/2.28.2"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 02:16:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:16:36.451351 2026] [security2:error] [pid 29297:tid 29297] [client 51.89.204.81:54712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "therealseska.com"] [uri "/.env"] [unique_id "apeHBNkQh4cVP8e9LDbVPQAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 00:44:33
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 20:44:26.153902 2026] [security2:error] [pid 1576:tid 1576] [client 51.89.204.81:63122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.shofarmusic.com"] [uri "/.env"] [unique_id "apdxarzcbXzJwXkbhE9ERAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-01 21:00:28
(1 week ago)
51.89.204.81 - - [01/Sep/2026:15:57:57 -0500] "GET /.env HTTP/1.1" 403 199 "-" "python-requests/2.28 ...
show more
51.89.204.81 - - [01/Sep/2026:15:57:57 -0500] "GET /.env HTTP/1.1" 403 199 "-" "python-requests/2.28.2" 51.89.204.81
51.89.204.81 - - [01/Sep/2026:15:57:58 -0500] "GET /.env HTTP/1.1" 403 199 "-" "python-requests/2.28.2" 51.89.204.81
51.89.204.81 - - [01/Sep/2026:15:58:01 -0500] "GET /.env HTTP/1.1" 403 199 "-" "python-requests/2.28.2" 51.89.204.81
51.89.204.81 - - [01/Sep/2026:15:58:03 -0500] "GET /.env HTTP/1.1" 403 199 "-" "python-requests/2.28.2" 51.89.204.81
51.89.204.81 - - [01/Sep/2026:15:58:38 -0500] "GET /.env HTTP/1.1" 403 199 "-" "python-requests/2.28.2" 51.89.204.81
51.89.204.81 - - [01/Sep/2026:15:58:48 -0500] "GET /.env HTTP/1.1" 403 199 "-" "python-requests/2.28.2" 51.89.204.81
51.89.204.81 - - [01/Sep/2026:15:58:50 -0500] "GET /.env HTTP/1.1" 403 199 "-" "python-requests/2.28.2" 51.89.204.81
51.89.204.81 - - [01/Sep/2026:15:58:51 -0500] "GET /.env HTTP/1.1" 403 199 "-" "python-requests/2.28.2" 51.89.204.81
51.89.204.81 - - [01/Sep/2026:15:58:54 -0500] "GET /.env HTTP/1.
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 20:56:55
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 16:56:47.502712 2026] [security2:error] [pid 30607:tid 30607] [client 51.89.204.81:58383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sergioaurell.com"] [uri "/.env"] [unique_id "apc8D3MpAY6Ftp98x6MzkwAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Didier Lagaert
2026-09-01 20:06:23
(1 week ago)
lie-17 : Block hidden directories=>/consultations-gratuites/.env(/)
Hacking
🇺🇸
TPI-Abuse
2026-09-01 18:46:00
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 14:45:54.002694 2026] [security2:error] [pid 18459:tid 18459] [client 51.89.204.81:61639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sebog.org"] [uri "/.env"] [unique_id "apcdYoVAtUi-LCDEU5ipMwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 15:05:24
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 11:05:17.591499 2026] [security2:error] [pid 1624:tid 1687] [client 51.89.204.81:51307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ainavelas.com"] [uri "/.env"] [unique_id "apbprVRblctnz_ngpDMUnQAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 13:35:24
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:35:17.440041 2026] [security2:error] [pid 29193:tid 29193] [client 51.89.204.81:59494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.affairedefemmes.net"] [uri "/.env"] [unique_id "apbUlU7qRI6dumEcu2CTzAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 11:58:42
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:58:37.685666 2026] [security2:error] [pid 21969:tid 21969] [client 51.89.204.81:60524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acworthga.us"] [uri "/.env"] [unique_id "apa97cy8dotYj-KlQ4q3PgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 10:34:21
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:34:15.254313 2026] [security2:error] [pid 12395:tid 12395] [client 51.89.204.81:52029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "renomarsh.com"] [uri "/.env"] [unique_id "apaqJ-Cs_pxdF_0txFuq8gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 10:04:48
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:04:41.180047 2026] [security2:error] [pid 5916:tid 5916] [client 51.89.204.81:62107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qbasys.com"] [uri "/.env"] [unique_id "apajOW0mJE7Z55lPIKd8MgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 09:32:35
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:32:32.274434 2026] [security2:error] [pid 226454:tid 226520] [client 51.89.204.81:61784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ptinct.org"] [uri "/.env"] [unique_id "apabsPHLbyjoqeeQ2w8-3wAAAIM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 08:27:39
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:27:35.855578 2026] [security2:error] [pid 28267:tid 28267] [client 51.89.204.81:61217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rcrgalicia.com"] [uri "/.env"] [unique_id "apaMd8yNurc7hFuSlaCoEwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 08:12:04
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.204.81 (ip81.ip-51-89-204.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:11:58.831599 2026] [security2:error] [pid 20085:tid 20201] [client 51.89.204.81:64498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3dfilament.com"] [uri "/.env"] [unique_id "apaIzm2LTempPzhL_z5JTQAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
