๐บ๐ธ
nyt
2026-05-02 12:00:32
(1 month ago)
Sensitive File Probe
Web App Attack
๐ฌ๐ง
consul.to
2026-05-01 14:46:56
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
๐ณ๐ฟ
Tripwire
2026-05-01 07:04:03
(1 month ago)
Scanning for exploits - /.env
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-01 06:07:27
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 02:07:21.822644 2026] [security2:error] [pid 16530:tid 16530] [client 102.129.234.19:22436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sdqdesigns.com"] [uri "/.env"] [unique_id "afRDGc4HqK0ERH5gZq4DYwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-01 03:48:38
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 23:48:30.919961 2026] [security2:error] [pid 28561:tid 28561] [client 102.129.234.19:20746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fonzies.net"] [uri "/.env"] [unique_id "afQijstUvuxtAmXvMv67LgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-01 02:47:08
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 22:47:01.751836 2026] [security2:error] [pid 15447:tid 15447] [client 102.129.234.19:1217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "archmediaptyltd.com"] [uri "/.env"] [unique_id "afQUJXzrKQ9RE5gpDT9gwgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-01 02:03:05
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 22:02:59.720013 2026] [security2:error] [pid 25332:tid 25332] [client 102.129.234.19:3976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "herecometheplanes.com"] [uri "/.env"] [unique_id "afQJ01Qm3FnlTYsApMXQIQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-05-01 01:58:57
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-05-01 00:52:21
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 20:52:17.679497 2026] [security2:error] [pid 19485:tid 19485] [client 102.129.234.19:15930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "concreting.net"] [uri "/.env"] [unique_id "afP5QV9ssKSbjxb3Mhh5QgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-01 00:17:50
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 20:17:45.281459 2026] [security2:error] [pid 11963:tid 11963] [client 102.129.234.19:32099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darkhorseyachting.com"] [uri "/.env"] [unique_id "afPxKeGYX_qtncR7y8WWKQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-30 23:40:43
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 19:40:36.294358 2026] [security2:error] [pid 23732:tid 23732] [client 102.129.234.19:57450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "snowfection.com"] [uri "/.env"] [unique_id "afPodIbMWLbblThGE8jfqwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-30 21:53:01
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 17:52:57.941376 2026] [security2:error] [pid 11355:tid 11355] [client 102.129.234.19:59742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allmyartprojects.com"] [uri "/.env"] [unique_id "afPPOZMTeAWCkoK7U8lSrQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-30 20:58:21
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 16:58:16.163156 2026] [security2:error] [pid 19041:tid 19041] [client 102.129.234.19:2634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accommodation-perthairport.com"] [uri "/.env"] [unique_id "afPCaIxyk2YbWXjKDUyGyQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-30 20:25:29
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.234.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 16:25:25.135981 2026] [security2:error] [pid 27198:tid 27198] [client 102.129.234.19:54520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ontrek.com"] [uri "/.env"] [unique_id "afO6tbUOkCEOflNQCydYOQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-04-30 19:51:39
(1 month ago)
1.356 requests with url.path *.env
Brute-Force
Bad Web Bot