🇺🇸
TPI-Abuse
2026-09-08 08:53:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 212.32.69.208 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.32.69.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 04:53:50.845104 2026] [security2:error] [pid 27192:tid 27192] [client 212.32.69.208:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "ap_NHsMH38Gl0kTyOwEyLwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-08 08:31:44
(2 days ago)
212.32.69.208 - - [08/Sep/2026:08:31:41 +0000] "GET /.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macint ...
show more
212.32.69.208 - - [08/Sep/2026:08:31:41 +0000] "GET /.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
212.32.69.208 - - [08/Sep/2026:08:31:44 +0000] "GET /.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
Web App Attack
🇺🇸
RH5
2026-09-08 08:30:14
(2 days ago)
Restricted URL probing (/.env) (UTC 2026-09-08 08:30)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 08:26:51
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 212.32.69.208 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.32.69.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 04:26:45.106365 2026] [security2:error] [pid 9549:tid 9549] [client 212.32.69.208:46083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wavecomputers.com"] [uri "/.env"] [unique_id "ap_GxRTnResUFlbHTkL8YgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
SLSLLC
2026-09-08 08:08:53
(2 days ago)
212.32.69.208 - - [08/Sep/2026:08:08:52 +0000] "GET /.env HTTP/1.1" 403 2113 "-" "Mozilla/5.0 (Macin ...
show more
212.32.69.208 - - [08/Sep/2026:08:08:52 +0000] "GET /.env HTTP/1.1" 403 2113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
Brute-Force
Web App Attack
🇺🇸
ambor
2026-09-08 07:43:40
(2 days ago)
Honeypot access: Environment file access attempt. Path: /.env
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-08 07:19:41
(2 days ago)
vulnerability scan
Web App Attack
🇺🇸
Alvino
2026-09-08 07:08:14
(2 days ago)
Blocked due to using a VPN or data center IP with abuse: 100
Web Spam
VPN IP
🇺🇸
ambor
2026-09-08 07:07:25
(2 days ago)
Honeypot triggered: /.env on ifebridge.com. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15 ...
show more
Honeypot triggered: /.env on ifebridge.com. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0. Method: GET
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 06:49:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 212.32.69.208 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.32.69.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 02:49:51.119350 2026] [security2:error] [pid 3162:tid 3162] [client 212.32.69.208:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kidswithcamerasmovie.com"] [uri "/.env"] [unique_id "ap-wD7Oh0VqmJdjsF8APYAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-09-08 06:48:00
(2 days ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking
🇫🇷
Jimbo67
2026-09-08 06:38:48
(2 days ago)
Cloudflare WAF: 1 hits in 30s | action=block | abuse=confirmed_abuse | categories=21 | rule_id=0189a ...
show more
Cloudflare WAF: 1 hits in 30s | action=block | abuse=confirmed_abuse | categories=21 | rule_id=0189a8c2c2ab4a60bc709bad14577d18 | URIs=/.env | confidence=0.95
show less
Web App Attack
🇫🇷
Baking333
2026-09-08 06:20:13
(2 days ago)
[redacted] 212.32.69.208 - - [08/Sep/2026:07:20:10 +0100] "GET /.env HTTP/2.0" 301 290 "-" "Mozilla/ ...
show more
[redacted] 212.32.69.208 - - [08/Sep/2026:07:20:10 +0100] "GET /.env HTTP/2.0" 301 290 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" [redacted] 212.32.69.208 - - [08/Sep/2026:07:20:11 +0100] "GET /fr/.env/ HTTP/2.0" 404 34474 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-08 06:07:40
(2 days ago)
2.875 requests to many distinct domains in 1 hour (3w6d17h)
Brute-Force
Bad Web Bot
🇨🇭
blinx
2026-09-08 06:06:53
(2 days ago)
Suspicious activity detected by Modsecurity
Web Spam
Port Scan
Hacking
Bad Web Bot
Web App Attack