๐จ๐ฆ
polycoda
2026-03-29 16:26:48
(2 months ago)
โจ๏ธ Probes for /.env everywhere
Hacking
Web App Attack
๐จ๐ฆ
polycoda
2026-03-29 16:04:56
(2 months ago)
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based)
Hacking
Web App Attack
๐จ๐ฆ
Blinker73
2026-03-24 11:55:58
(2 months ago)
162.158.63.210 - - [24/Mar/2026:07:55:37 -0400] "GET /.env2 HTTP/1.1" 301 162 "-" "-"
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 10:38:13
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 06:38:06.469610 2026] [security2:error] [pid 30122:tid 30122] [client 162.158.63.210:13936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.contrarianadvisors.com"] [uri "/.env.save"] [unique_id "ab51Dpzm4X74q4fYjYu2VgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 01:33:51
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:33:44.775643 2026] [security2:error] [pid 3091:tid 3091] [client 162.158.63.210:10728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.tcmu.org"] [uri "/.env.dev"] [unique_id "ab31eCguWPoyb03Yx1cF7AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 00:52:31
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:52:22.853808 2026] [security2:error] [pid 32476:tid 32476] [client 162.158.63.210:11737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thenolangroup.llc"] [uri "/.env.development.local"] [unique_id "ab3rxiuFNeC6WeroyrXLQgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 09:01:31
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:01:24.609001 2026] [security2:error] [pid 19475:tid 19475] [client 162.158.63.210:12444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digitaltom.net.digitaltom.com"] [uri "/.env.test"] [unique_id "ab0M5ERwWzkMGn4QSa_-pwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 07:50:18
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:50:07.983189 2026] [security2:error] [pid 24198:tid 24198] [client 162.158.63.210:9851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wp.dtla2028.com"] [uri "/.env.tmp"] [unique_id "abz8L-X1I1dJc8tswkwgZQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 02:27:36
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:27:32.460336 2026] [security2:error] [pid 20751:tid 20751] [client 162.158.63.210:14254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.bebloor.ca"] [uri "/.env.example"] [unique_id "abywlDpj-rotRFB0LxAd_QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 01:36:31
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 21:36:23.901533 2026] [security2:error] [pid 10455:tid 10455] [client 162.158.63.210:14061] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.suretrap.com"] [uri "/config/.env.local"] [unique_id "abykl2wvgU7bh3sW2d79IQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 11:39:30
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:39:23.438357 2026] [security2:error] [pid 363:tid 363] [client 162.158.63.210:9567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cleaningsuppliescr.com"] [uri "/.env.backup"] [unique_id "abvgaxDI67Xyz6iAtl-WlQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 11:22:04
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:21:59.343492 2026] [security2:error] [pid 32047:tid 32047] [client 162.158.63.210:13415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.garnetcreek.com"] [uri "/.env.backup"] [unique_id "abvcV9_htUgpJsspWxOZvQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 10:07:32
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:07:15.578282 2026] [security2:error] [pid 5514:tid 5514] [client 162.158.63.210:10424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.meganmurph.com"] [uri "/.env.dist"] [unique_id "abvK07xtEOoZfgurgV5J1gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 09:34:45
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:34:40.467703 2026] [security2:error] [pid 25960:tid 25960] [client 162.158.63.210:10262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.francisautodetailing.com"] [uri "/site/.env"] [unique_id "abvDMBlpw3mJI-z191rBKQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 08:56:07
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:55:58.201543 2026] [security2:error] [pid 31041:tid 31041] [client 162.158.63.210:9864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.calentadoresdemexico.com.mx"] [uri "/srv/.env"] [unique_id "abu6HroPmXwxSRtVKeMbcgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack