🇸🇬
serverutama
2026-06-09 11:03:06
(1 day ago)
Nginx scanner: 194.62.107.136 - - [09/Jun/2026:17:49:35 +0700] "GET /.env HTTP/1.1" 301 162 "-" "Moz ...
show more
Nginx scanner: 194.62.107.136 - - [09/Jun/2026:17:49:35 +0700] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" "-"
show less
Web App Attack
Bad Web Bot
🇦🇺
2000cn.com.au
2026-06-09 04:41:00
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇩🇪
FeG Deutschland
2026-06-09 03:48:54
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
big-cloud.nl
2026-06-08 20:20:28
(1 day ago)
Try to access /.env
Web App Attack
🇷🇺
DZBOT
2026-06-08 17:44:03
(1 day ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
ArturShelby
2026-06-08 16:54:52
(1 day ago)
Critical file access: /.env
Web App Attack
🇺🇸
ambor
2026-06-08 16:46:45
(1 day ago)
Honeypot access: Environment file access attempt. Path: /.env
Web App Attack
2026-06-07 22:20:02
(2 days ago)
suspicious request in access.log
Web App Attack
2026-06-07 04:40:01
(3 days ago)
194.62.107.136 - - [07/Jun/2026:12:40:00 +0800] "GET /.env HTTP/1.1" 404 300905 "-" "Mozilla/5.0 (Ma ...
show more
194.62.107.136 - - [07/Jun/2026:12:40:00 +0800] "GET /.env HTTP/1.1" 404 300905 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 04:18:46
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 00:18:39.211013 2026] [security2:error] [pid 19877:tid 19877] [client 194.62.107.136:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextmoon.com"] [uri "/.env"] [unique_id "aiTxH9-9P4_Z2rXvL5LHKgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-07 04:12:03
(3 days ago)
(caddyscan) Scanner path probe from 194.62.107.136 (US/United States/-): 5 in the last 3600 secs; Po ...
show more
(caddyscan) Scanner path probe from 194.62.107.136 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 194.62.107.136 - - [07/Jun/2026:03:59:56 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 194.62.107.136 - - [07/Jun/2026:04:03:16 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 194.62.107.136 - - [07/Jun/2026:04:10:15 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 194.62.107.136 - - [07/Jun/2026:04:11:08 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 194.62.107.136 - - [07/Jun/2026:04:12:00 +0000] "GET /.env HTTP/1.1"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-07 02:01:19
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 22:01:13.218138 2026] [security2:error] [pid 6994:tid 6994] [client 194.62.107.136:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nyemdr.com"] [uri "/.env"] [unique_id "aiTQ6QO1Ky1B4bWz7NVIvQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mw
2026-06-07 01:15:03
(3 days ago)
GET /.env HTTP/1.1
Web App Attack
🇫🇷
masterguru
2026-06-07 01:07:38
(3 days ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇫🇷
✨
2026-06-07 00:42:19
(3 days ago)
Domain : redirect.netenergy.uk
Rule : env
2026-06-07 00:39:18 217.194.210.152 GET /.env - 80 - 194.6 ...
show more
Domain : redirect.netenergy.uk
Rule : env
2026-06-07 00:39:18 217.194.210.152 GET /.env - 80 - 194.62.107.136 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 - cirrusbuildingsolutions.co.uk 404 0 2 1486 224 124 - -
show less
Hacking
SQL Injection