🇺🇸
TPI-Abuse
2026-06-14 07:29:58
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 03:29:55.257665 2026] [security2:error] [pid 5073:tid 5073] [client 58.50.206.88:41768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sydat.se"] [uri "/.env"] [unique_id "ai5Yc6kXBNFXYMzATfOD0QAAAHU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 06:55:51
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 02:55:42.896543 2026] [security2:error] [pid 8715:tid 8715] [client 58.50.206.88:52582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.malarbodentrollhattan.se"] [uri "/.env"] [unique_id "ai5QbnLvHJdsRRD9rh47PAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-06-14 06:48:40
(3 hours ago)
Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 02:54:16
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 22:54:10.124743 2026] [security2:error] [pid 22858:tid 22858] [client 58.50.206.88:46132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.maritanasystems.eckerberg.net"] [uri "/.env"] [unique_id "ai4X0jMZGzn8x2QpoqiJ4wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 02:37:47
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 22:37:39.332478 2026] [security2:error] [pid 25409:tid 25409] [client 58.50.206.88:55638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.marcosbarraza.net"] [uri "/.env"] [unique_id "ai4T88MayHGBhF7F43v35wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 02:21:12
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 22:21:08.339182 2026] [security2:error] [pid 2062:tid 2062] [client 58.50.206.88:33266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.manuals.antech.net"] [uri "/.env"] [unique_id "ai4QFO7IlTKF1Dh-q20spAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-14 02:05:43
(7 hours ago)
Abuse Detected (2)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 01:48:29
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 21:48:22.003366 2026] [security2:error] [pid 22805:tid 22805] [client 58.50.206.88:58250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.malamutian.net"] [uri "/.env"] [unique_id "ai4IZtnllVFQYelNesahWAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-06-13 20:42:04
(13 hours ago)
58.50.206.88 - - [13/Jun/2026:21:42:03 +0100] "GET /.env HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Windows ...
show more
58.50.206.88 - - [13/Jun/2026:21:42:03 +0100] "GET /.env HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0"
2026/06/13 21:42:03 [error] 1929836#1929836: *1724898 access forbidden by rule, client: 58.50.206.88, server: mar.pt, request: "GET /.env HTTP/2.0", host: "mar.pt", referrer: "https://www.mar.pt/.env"
58.50.206.88 - - [13/Jun/2026:21:42:03 +0100] "GET /.env HTTP/2.0" 403 1045 "https://www.mar.pt/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0"
show less
Brute-Force
Web App Attack
🇧🇪
voormedia
2026-06-13 20:04:35
(13 hours ago)
Accessed trap at '/.env'
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 10:57:46
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 58.50.206.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 06:57:39.476592 2026] [security2:error] [pid 2083:tid 2083] [client 58.50.206.88:46216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jussetcotradinglimited.co"] [uri "/.env"] [unique_id "ai03o58ZL_eBlWKFRHRi2QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-12 08:50:58
(2 days ago)
58.50.206.88 - - [12/Jun/2026:10:50:57 +0200] "GET /users/sign_in HTTP/1.1" 404 506 "-" "Mozilla/5.0 ...
show more
58.50.206.88 - - [12/Jun/2026:10:50:57 +0200] "GET /users/sign_in HTTP/1.1" 404 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" ...
show less
Web App Attack