|
๐ฌ๐ง
openstrike.co.uk
|
|
146 attacks on env grabbing URLs:
GET /services/api/.env HTTP/1.1
|
Hacking
|
|
|
๐ต๐ฐ
sbk97 (https://sayor.net)
|
|
HTTP attacks observed: x16x03x01x05xc2x01 | status=400 || GET / HTTP/1.1 | status=301 || GET / HTTP/ ...
show more
HTTP attacks observed: x16x03x01x05xc2x01 | status=400 || GET / HTTP/1.1 | status=301 || GET / HTTP/1.1 | status=200 || GET / HTTP/1.1 | status=200 || GET /.env.dev HTTP/2.0 | status=404 || GET /api/.env.backup HTTP/2.0 | status=404 || GET /.env.prod HTTP/2.0 | status=404 || GET /.env.backup HTTP/2.0 | status=404 || GET /.env.staging HTTP/2.0 | status=404 || GET /.env HTTP/2.0 | status=403 || GET /.env.save HTTP/2.0 | status=404 || GET /internal/.env.production HTTP/2.0 | status=404 || GET /.env.old HTTP/2.0 | status=404 || GET /.env.local HTTP/2.0 | status=404 || GET /backend/.env.bak HTTP/2.0 | status=404 || GET /src/.env.backup HTTP/2.0 | status=404 || GET /backend/api/.env HTTP/2.0 | status=404 || GET /src/.env.production HTTP/2.0 | status=404 || GET /server/.env HTTP/2.0 | status=404 || GET /build/.env HTTP/2.0 | status=404 || GET /services/backend/.env HTTP/2.0 | status=404 || GET /data/.env HTTP/2.0 | status=404 || GET /config/.env.production HTTP/2.0 | status=404 || GET /var/.env HTTP/2.0 | stat
show less
|
Brute-Force
|
|
|
๐ต๐ฐ
sbk97 (https://sayor.net)
|
|
HTTP attack observed: x16x03x01x05xc2x01 | status=400 | response_size=226
|
Brute-Force
|
|
|
๐ง๐ช
cmbplf
|
|
130 requests with url.path *.env
|
Brute-Force
Bad Web Bot
|
|
|
๐ฌ๐ง
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
|
๐ซ๐ท
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.153.158.87 (87.158.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.158.87 (87.158.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 06:00:31.704617 2026] [security2:error] [pid 1395:tid 1395] [client 34.153.158.87:42194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.muslera.com"] [uri "/.env.production"] [unique_id "ahbAv9owj4zKv51LwoZj-AAAAA0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.153.158.87 (87.158.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.158.87 (87.158.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 04:13:53.545853 2026] [security2:error] [pid 7101:tid 7110] [client 34.153.158.87:52632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.isoceansl.com"] [uri "/.env.backup"] [unique_id "ahanwd_L4fvpf6AKBUffIQAAAQc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.153.158.87 (87.158.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.158.87 (87.158.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 03:18:38.699145 2026] [security2:error] [pid 10895:tid 10895] [client 34.153.158.87:34922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.interior-cosmetics.com"] [uri "/.env.backup.txt"] [unique_id "ahaazh1STnjx5pYrea_BggAAAA0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐ณ๐ฑ
Savvii
|
|
20 attempts against mh-misbehave-ban on redirect
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐ณ๐ฑ
e.fierstra
|
|
ModSecurity hits exceeded
|
Bad Web Bot
Web App Attack
|
|
|
๐ณ๐ฑ
Brict IT
|
|
|
Bad Web Bot
Web App Attack
|
|