๐ช๐ธ
Gem
2026-03-06 23:11:33
(6 months ago)
Unauthorized web scan.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-02 00:18:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 19:18:39.339642 2026] [security2:error] [pid 12226:tid 12226] [client 193.32.176.23:60048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salinabible.org"] [uri "/.env"] [unique_id "aaTXX4sxxOETlNq5AM1rhQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-03-01 22:00:28
(6 months ago)
"GET /.env HTTP/1.1"
Hacking
Web App Attack
๐ฑ๐ป
garmtech.com
2026-03-01 21:39:47
(6 months ago)
IM360 WAF: Laravel .env file access
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-01 21:06:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 16:06:04.417610 2026] [security2:error] [pid 14071:tid 14071] [client 193.32.176.23:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ruralcommunitycare.org"] [uri "/.env"] [unique_id "aaSqPOmktBTsiPJu63OfuQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-01 20:19:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 15:19:17.646088 2026] [security2:error] [pid 4407:tid 4407] [client 193.32.176.23:33758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rudiscreations.org"] [uri "/.env"] [unique_id "aaSfRQ4e9yeK6TgF2aty8gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฟ
Tripwire
2026-03-01 18:46:24
(6 months ago)
Scanning for exploits - /.env
Web App Attack
๐ต๐ฑ
IROK
2026-03-01 18:25:17
(6 months ago)
Malware/WebShell Scan blocked by ModSecurity
...
Hacking
๐บ๐ธ
TPI-Abuse
2026-03-01 17:16:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 12:16:03.730746 2026] [security2:error] [pid 21507:tid 21507] [client 193.32.176.23:43994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rochesterhistorical.org"] [uri "/.env"] [unique_id "aaR0U-_pjcGeiDmb5hMe2wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฑ๐น
NotACaptcha
2026-03-01 16:44:31
(6 months ago)
webserver:443 [01/Mar/2026] "GET /.env HTTP/1.1" 401 4475 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_ ...
show more
webserver:443 [01/Mar/2026] "GET /.env HTTP/1.1" 401 4475 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:147.0) Gecko/20100101 Firefox/147.0" 53536 - -
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-01 15:13:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 10:13:43.571902 2026] [security2:error] [pid 20524:tid 20524] [client 193.32.176.23:54176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rjabramsonfoundation.org"] [uri "/.env"] [unique_id "aaRXp6-zThyMG1ZOqL9fKQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-01 14:49:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 09:49:01.807208 2026] [security2:error] [pid 28494:tid 28494] [client 193.32.176.23:60062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rimaine.org"] [uri "/.env"] [unique_id "aaRR3f0Twv-F_xzqpZZhGAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-01 13:53:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 08:53:17.856475 2026] [security2:error] [pid 25914:tid 25914] [client 193.32.176.23:37948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "resume.martinka.org"] [uri "/.env"] [unique_id "aaREzXx3MODVMxf0QsGJ1QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-01 13:31:03
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 193.32.176.23 (162402.ip-ptr.tech): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 08:30:57.423024 2026] [security2:error] [pid 4084:tid 4084] [client 193.32.176.23:45970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reserve.sanjuangrange.org"] [uri "/.env"] [unique_id "aaQ_kQblDUzf9QboHHpj2QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐น
Renรฉ Hickersberger
2026-03-01 12:49:38
(6 months ago)
[2026-03-01T12:49:38Z] Malicious request to /.env
Hacking
Bad Web Bot
Web App Attack