2026-07-29 07:00:00
(3 weeks ago)
Apache probe; attempts=21; exact paths: /.env | /.env/
Web App Attack
🇫🇷
masterguru
2026-07-24 00:22:57
(4 weeks ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇩🇪
Vegascosmetics
2026-07-23 23:52:14
(4 weeks ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.env (Match: /.env)
show less
Hacking
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-07-23 23:05:57
(4 weeks ago)
Multiple WAF Violations
Web App Attack
🇳🇱
BlueWire Hosting
2026-07-23 12:18:57
(4 weeks ago)
Probing websites for vulnerabilities
Web App Attack
🇩🇪
todix
2026-07-23 11:33:41
(4 weeks ago)
Web App Attack Exploid from 45.131.194.111
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 11:32:23
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 07:32:17.049586 2026] [security2:error] [pid 12857:tid 12857] [client 45.131.194.111:40737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "canelli.net"] [uri "/.env"] [unique_id "amH7wcNoWCTV4rxv4UCxGAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
dominioz
2026-07-23 09:12:53
(4 weeks ago)
2026-07-23 09:10:58 GET /.env - - 45.131.194.111 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10. ...
show more
2026-07-23 09:10:58 GET /.env - - 45.131.194.111 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10.15;+rv:77.0)+Gecko/20100101+Firefox/77.0 - 301 467
2026-07-23 09:11:32 GET /.env - - 45.131.194.111 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10.15;+rv:77.0)+Gecko/20100101+Firefox/77.0 - 301 564
2026-07-23 09:11:32 GET /err/ 404;https://cracrilicos.com.br:443/.env - 45.131.194.111 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10.15;+rv:77.0)+Gecko/20100101+Firefox/77.0 - 200 1575
2026-07-23 09:12:03 GET /err/ 404;https://dominioz.com.br:443/.env - 45.131.194.111 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10.15;+rv:77.0)+Gecko/20100101+Firefox/77.0 - 200 1769
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 08:37:59
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 04:37:55.107795 2026] [security2:error] [pid 2093641:tid 2093714] [client 45.131.194.111:43367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "epsadvocate.org"] [uri "/.env"] [unique_id "amHS459GooyHBP5zmMZGhQAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Valhalla
2026-07-23 06:46:48
(4 weeks ago)
/.env
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 05:53:09
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 01:53:02.267540 2026] [security2:error] [pid 209197:tid 209197] [client 45.131.194.111:41279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "admcolumbus.com"] [uri "/.env"] [unique_id "amGsPje2zgkkYYGwq8LeYgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 05:32:32
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 01:32:26.039391 2026] [security2:error] [pid 2131547:tid 2131547] [client 45.131.194.111:24295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ecodesarrollourbano.com"] [uri "/.env"] [unique_id "amGnav0rtUvRenJgAx4hsQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 04:55:32
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 00:55:29.098526 2026] [security2:error] [pid 1604689:tid 1604689] [client 45.131.194.111:54303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "murciafm.com"] [uri "/.env"] [unique_id "amGewXAvNBDfBdj0mjv-eAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-07-23 04:16:43
(4 weeks ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 03:19:25
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 23:19:17.656720 2026] [security2:error] [pid 2118405:tid 2118405] [client 45.131.194.111:40169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "register-yacht-bahamas.com"] [uri "/.env"] [unique_id "amGINSWfowCK30oXU14g6gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack