2026-07-28 06:58:09
(27 minutes ago)
"GET /.env HTTP/1.1"
Hacking
Web App Attack
2026-07-28 00:41:11
(6 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇦
URAN Publishing Service
2026-07-28 00:18:31
(7 hours ago)
173.208.232.83 - - [28/Jul/2026:03:18:29 +0300] "GET /.env HTTP/1.1" 301 596 "-" "Mozilla/5.0 (Windo ...
show more
173.208.232.83 - - [28/Jul/2026:03:18:29 +0300] "GET /.env HTTP/1.1" 301 596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
173.208.232.83 - - [28/Jul/2026:03:18:30 +0300] "GET /.env HTTP/1.1" 404 4697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇫🇷
✨
2026-07-28 00:07:12
(7 hours ago)
Domain : breeze.business
Rule : env
2026-07-28 00:05:23 W3SVC33 WIN-NPDT48DBO6G ***hidden-privacy*** ...
show more
Domain : breeze.business
Rule : env
2026-07-28 00:05:23 W3SVC33 WIN-NPDT48DBO6G ***hidden-privacy*** GET /.env.local - 80 - 173.208.232.83 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 - breeze.business 403 0 0 1497 208 305 - -
show less
Hacking
SQL Injection
🇫🇷
Baking333
2026-07-28 00:06:44
(7 hours ago)
[redacted] 173.208.232.83 - - [28/Jul/2026:00:31:24 +0100] "GET /.[redacted] HTTP/1.1" 302 1543 0/61 ...
show more
[redacted] 173.208.232.83 - - [28/Jul/2026:00:31:24 +0100] "GET /.[redacted] HTTP/1.1" 302 1543 0/61990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" [redacted] 173.208.232.83 - - [28/Jul/2026:01:06:43 +0100] "GET /.[redacted] HTTP/1.1" 302 1568 0/57804 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇺🇸
interbiznw.com
2026-07-27 23:53:20
(7 hours ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
SLSLLC
2026-07-27 23:38:47
(7 hours ago)
173.208.232.83 - - [27/Jul/2026:23:38:46 +0000] "GET /.env HTTP/2.0" 403 1928 "-" "Mozilla/5.0 (Wind ...
show more
173.208.232.83 - - [27/Jul/2026:23:38:46 +0000] "GET /.env HTTP/2.0" 403 1928 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇫🇷
GabrielJST
2026-07-27 22:41:47
(8 hours ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 173.208.232.83 (US/Unite ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 173.208.232.83 (US/United States/-)
show less
Port Scan
🇫🇷
[email protected]
2026-07-27 22:24:51
(9 hours ago)
PrestaShop Security Module: Suspicious path detected (/.git)
Web App Attack
🇩🇪
iNetWorker
2026-07-27 22:20:21
(9 hours ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 22:12:49
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 173.208.232.83 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 173.208.232.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 18:12:43.249334 2026] [security2:error] [pid 2465897:tid 2465897] [client 173.208.232.83:52020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "babylontravelone.com"] [uri "/.env"] [unique_id "amfX251h5mR9F_7i8Jrd_QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
raph
2026-07-27 21:59:24
(9 hours ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 21:36:46
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 173.208.232.83 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 173.208.232.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 17:36:38.803617 2026] [security2:error] [pid 152346:tid 152346] [client 173.208.232.83:38372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atame.com"] [uri "/.env"] [unique_id "amfPZt1-OeSBIwDRxODqbwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-27 21:24:03
(10 hours ago)
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1
Hacking
Web App Attack
🇫🇷
UnixPrime
2026-07-27 21:15:15
(10 hours ago)
173.208.232.83 - - [27/Jul/2026:23:15:12 +0200] "GET /.env HTTP/1.1" 404 4116 "-" "Mozilla/5.0 (Wind ...
show more
173.208.232.83 - - [27/Jul/2026:23:15:12 +0200] "GET /.env HTTP/1.1" 404 4116 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
173.208.232.83 - - [27/Jul/2026:23:15:14 +0200] "GET /.env.local HTTP/1.1" 404 4117 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack