🇫🇷
Octopuce
2026-06-15 05:43:18
(4 hours ago)
Aggressive web search of vulnerable pages: /frontend/.env.local /src/.env /prod/.env /src/.env.local ...
show more
Aggressive web search of vulnerable pages: /frontend/.env.local /src/.env /prod/.env /src/.env.local /server/.env.local ...
show less
Web App Attack
🇨🇭
🇨🇭 Hosting
2026-06-15 05:10:11
(5 hours ago)
Automated WAF report: 125-150 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-06-15 02:30:49
(7 hours ago)
ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe. O ...
show more
ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe. Observed by 1 sensor(s); 161 hits.
show less
Web App Attack
🇫🇷
✨
2026-06-15 02:26:21
(8 hours ago)
Domain : graphic-impact.co.uk
Rule : env
2026-06-15 02:24:34 ***hidden-privacy*** GET /frontend/.env ...
show more
Domain : graphic-impact.co.uk
Rule : env
2026-06-15 02:24:34 ***hidden-privacy*** GET /frontend/.env.local - 443 - 136.110.112.73 HTTP/1.1 Mozilla/5.0 (iPad; U; CPU OS 4_2_1 like Mac OS X; ja-jp) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8C148 Safari/6533.18.5 - www.graphic-impact.co.uk 404 0 0 354 289 1613 - -
show less
Hacking
SQL Injection
🇨🇭
Origon
2026-06-15 01:38:04
(8 hours ago)
http-sensitive-files - IP: 136.110.112.73 - time="2026-06-15T03:38:03+02:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 136.110.112.73 - time="2026-06-15T03:38:03+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 136.110.112.73 (JP/396982) : 4h ban on Ip 136.110.112.73" module=db
show less
Web App Attack
🇺🇸
mnsf
2026-06-15 00:20:29
(10 hours ago)
Scanning/Probing (18)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-14 22:01:40
(12 hours ago)
Auto-ban: >3000 req/min op 2026-06-14
Web App Attack
SSH
Hacking
🇫🇷
dynamix
2026-06-14 07:26:31
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 05:45:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.110.112.73 (73.112.110.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.110.112.73 (73.112.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 01:45:38.019651 2026] [security2:error] [pid 26135:tid 26135] [client 136.110.112.73:52252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sixtiesdiner.jbaydeliveries.com"] [uri "/.env~"] [unique_id "ai5AAsZmLcBj5uVMiuiWVwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 03:13:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.110.112.73 (73.112.110.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.110.112.73 (73.112.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 23:13:36.802048 2026] [security2:error] [pid 25784:tid 25911] [client 136.110.112.73:57468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darkestmoonart.com"] [uri "/admin/.env.local"] [unique_id "ai4cYBewTYAQH2QZg2HmlwAAARI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-06-14 02:45:03
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-06-14 02:39:54
(1 day ago)
Web attack/malicious scanning detected
Web App Attack