🇫🇷
masterguru
2026-07-24 00:24:28
(4 weeks ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
2026-07-23 17:51:03
(4 weeks ago)
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 12:44:03
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 08:43:56.086786 2026] [security2:error] [pid 2803966:tid 2803966] [client 45.131.194.213:54497] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "citati.net"] [uri "/.env"] [unique_id "amIMjMC13up_8XG044jJtgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-07-23 12:19:17
(4 weeks ago)
Probing websites for vulnerabilities
Web App Attack
🇫🇷
masterguru
2026-07-23 11:00:26
(4 weeks ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 08:37:04
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 04:36:57.225083 2026] [security2:error] [pid 2093642:tid 2093754] [client 45.131.194.213:28945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cityofmiddleton.org"] [uri "/.env"] [unique_id "amHSqT4uGTHeXjSxd-l-fwAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 05:55:34
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 01:55:28.205023 2026] [security2:error] [pid 211291:tid 211291] [client 45.131.194.213:28595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bajocamara.com"] [uri "/.env"] [unique_id "amGs0FRYv6ZSZ9r_GrD8uAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 05:31:22
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 01:31:17.436826 2026] [security2:error] [pid 2128892:tid 2128892] [client 45.131.194.213:26521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crescentcitycafe.com"] [uri "/.env"] [unique_id "amGnJWwSO31Fmk6kuorZfQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 04:41:59
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 00:41:52.513941 2026] [security2:error] [pid 1741917:tid 1741917] [client 45.131.194.213:47371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zeetec.nl"] [uri "/.env"] [unique_id "amGbkCzn64TlkGu6KW9_twAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 02:51:11
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 22:51:05.371494 2026] [security2:error] [pid 2084870:tid 2084870] [client 45.131.194.213:54793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cherylpelletier.com"] [uri "/.env"] [unique_id "amGBmc9cw2NYMBx15rAW5wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
YF
2026-07-23 02:30:28
(1 month ago)
Distributed subnet attack — coordinated scanning from multiple IPs in the same /24
DDoS Attack
Web App Attack
🇩🇪
Bedios GmbH
2026-07-23 00:59:18
(1 month ago)
Login credentials theft attempt
Hacking
🇩🇪
neckaralb-admin.de
2026-07-22 22:52:56
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 20:57:31
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 16:57:27.094785 2026] [security2:error] [pid 2122734:tid 2122734] [client 45.131.194.213:34625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aktkaro.com"] [uri "/.env"] [unique_id "amEut2kqJzdsBzvTCpj3-QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 19:17:20
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.194.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 15:17:13.832194 2026] [security2:error] [pid 1250007:tid 1250007] [client 45.131.194.213:23133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bhartman.com"] [uri "/.env"] [unique_id "amEXOWWSp9N5XgIFmdhZUQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack