🇫🇷
SpaceHost-Server
2026-04-04 22:46:32
UTC ·
(7 months ago)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-04-03 22:30:16
UTC ·
(7 months ago)
Brute-Force
Web App Attack
🇩🇪
Blexyel
2026-04-03 07:41:25
UTC ·
(7 months ago)
91.234.7.2 - - [03/Apr/2026:07:41:19 +0000] "GET /.git/config HTTP/1.1" 404 577 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
Brute-Force
Web App Attack
🇩🇪
macrob
2026-04-03 07:24:45
UTC ·
(7 months ago)
2026/04/03 07:24:43 [error] 3089150#3089150: *123831068 access forbidden by rule, client: 91.234.7.2, server: fn.binixo.es, request: "GET /.env.staging HTTP/2.0", host: "fn.binixo.es"
2026/04/03 07:24:43 [error] 3089154#3089154: *123831077 access for ...
show more
2026/04/03 07:24:43 [error] 3089150#3089150: *123831068 access forbidden by rule, client: 91.234.7.2, server: fn.binixo.es, request: "GET /.env.staging HTTP/2.0", host: "fn.binixo.es"
2026/04/03 07:24:43 [error] 3089154#3089154: *123831077 access forbidden by rule, client: 91.234.7.2, server: fn.binixo.es, request: "GET /.env.backup HTTP/2.0", host: "fn.binixo.es"
2026/04/03 07:24:43 [error] 3089154#3089154: *123831089 access forbidden by rule, client: 91.234.7.2, server: fn.binixo.es, request: "GET /.env.bak HTTP/2.0", host: "fn.binixo.es"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 07:08:32
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.7.2 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 03:08:27.292589 2026] [security2:error] [pid 29906:tid 29906] [client 91.234. ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.7.2 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 03:08:27.292589 2026] [security2:error] [pid 29906:tid 29906] [client 91.234.7.2:25915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fluff.thewaywework.com"] [uri "/.env.production"] [unique_id "ac9na3lZH-Eh8bA1pnXuGwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-04-03 07:07:05
UTC ·
(7 months ago)
Blocking for trying to access an exploit file: /.env.staging
Hacking
🇬🇧
AvonleaConsulting
2026-04-03 06:50:36
UTC ·
(7 months ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-04-03 05:17:45
UTC ·
(7 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 04:55:55
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.7.2 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 00:55:52.024392 2026] [security2:error] [pid 7772:tid 7772] [client 91.234.7. ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.7.2 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 00:55:52.024392 2026] [security2:error] [pid 7772:tid 7772] [client 91.234.7.2:47929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fibw.com"] [uri "/.env"] [unique_id "ac9IWAxByWf4Vyyba3YM5wAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-04-03 04:13:08
UTC ·
(7 months ago)
2026/04/03 05:12:56 [error] 786062#786062: *17570572 access forbidden by rule, client: 91.234.7.2, server: feminina.eu, request: "GET /.env HTTP/2.0", host: "feminina.eu"
91.234.7.2 - - [03/Apr/2026:05:12:56 +0100] "GET /.env HTTP/2.0" 403 95 "-" "Mo ...
show more
2026/04/03 05:12:56 [error] 786062#786062: *17570572 access forbidden by rule, client: 91.234.7.2, server: feminina.eu, request: "GET /.env HTTP/2.0", host: "feminina.eu"
91.234.7.2 - - [03/Apr/2026:05:12:56 +0100] "GET /.env HTTP/2.0" 403 95 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
2026/04/03 05:13:06 [error] 786055#786055: *17570596 access forbidden by rule, client: 91.234.7.2, server: feminina.eu, request: "GET /core/.env HTTP/2.0", host: "feminina.eu"
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 04:03:45
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.7.2 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 00:03:37.255407 2026] [security2:error] [pid 29953:tid 29953] [client 91.234. ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.7.2 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 00:03:37.255407 2026] [security2:error] [pid 29953:tid 29953] [client 91.234.7.2:54707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fee-seize.com"] [uri "/.env.local"] [unique_id "ac88GVMjpq6BM86QsXQQkgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
antlac1
2026-04-03 03:59:25
UTC ·
(7 months ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇦🇺
nzhost.co.nz
2026-04-03 03:53:19
UTC ·
(7 months ago)
$f2bV_matches
Hacking
Brute-Force
🇬🇧
consul.to
2026-04-03 03:06:02
UTC ·
(7 months ago)
Web attack/malicious scanning detected
Web App Attack
🇦🇺
clapper
2026-04-03 03:05:49
UTC ·
(7 months ago)
(mod_security) mod_security (id:949110) triggered by 91.234.7.2 (UA/Ukraine/dedicated.vsys.host): 5 in the last 3600 secs; ID: rub
Brute-Force
Bad Web Bot