🇩🇪
Ba-Yu
2026-06-08 11:22:48
(1 week ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇬🇧
openstrike.co.uk
2026-06-08 05:13:43
(1 week ago)
18 attacks on env grabbing URLs:
GET /laravel/.env HTTP/1.1
Hacking
🇫🇷
masterguru
2026-06-08 04:11:36
(1 week ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇩🇪
todix
2026-06-08 02:49:40
(1 week ago)
Web App Attack Exploid from 62.72.37.112
Web App Attack
🇨🇭
4server
2026-06-08 00:49:20
(1 week ago)
[MonJun0802:49:14.9615042026][security2:error][pid1553415:tid1553572][client62.72.37.112:0]ModSecuri ...
show more
[MonJun0802:49:14.9615042026][security2:error][pid1553415:tid1553572][client62.72.37.112:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"eutecne.ch\"][uri\"/admin/.env\"][unique_id\"aiYRimthG-KSLsBcykLWmAAAAAM\"]
show less
Hacking
Web App Attack
🇬🇧
Apache
2026-06-07 22:13:46
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 62.72.37.112 (FR/France/-): 5 in the last 300 s ...
show more
(mod_security) mod_security (id:210492) triggered by 62.72.37.112 (FR/France/-): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇳🇱
wlt-blocker
2026-06-07 20:22:12
(1 week ago)
Unauthorized access to webpage admin
Web App Attack
2026-06-07 18:48:38
(1 week ago)
(caddyscan) Scanner path probe from 62.72.37.112 (FR/France/-): 5 in the last 3600 secs; Ports: *; D ...
show more
(caddyscan) Scanner path probe from 62.72.37.112 (FR/France/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 62.72.37.112 - - [07/Jun/2026:18:48:38 +0000] "GET /laravel/.env HTTP/1.1"
[REDACTED] 200 2627 62.72.37.112 - - [07/Jun/2026:18:48:38 +0000] "GET /api/.env HTTP/1.1"
[REDACTED] 200 2627 62.72.37.112 - - [07/Jun/2026:18:48:38 +0000] "GET /admin/.env HTTP/1.1"
[REDACTED] 200 2627 62.72.37.112 - - [07/Jun/2026:18:48:38 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 62.72.37.112 - - [07/Jun/2026:18:48:38 +0000] "GET /member/.env HTTP/1.1"
show less
Port Scan
🇬🇧
consul.to
2026-06-07 18:17:57
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇷
dominioz
2026-06-07 13:15:19
(1 week ago)
2026-06-07 13:14:56 GET /.env - - 62.72.37.112 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15 ...
show more
2026-06-07 13:14:56 GET /.env - - 62.72.37.112 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - 301 607
2026-06-07 13:14:56 GET /admin/.env - - 62.72.37.112 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - 301 619
2026-06-07 13:14:56 GET /core/.env - - 62.72.37.112 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - 301 617
2026-06-07 13:14:56 GET /member/.env - - 62.72.37.112 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - 301 621
...
show less
Web App Attack
🇩🇪
Vegascosmetics
2026-06-07 13:12:12
(1 week ago)
Kingcopy(AI-IDS) Report: IP automatically blocked after attack pattern. Vegas Security System
Hacking
Brute-Force
🇮🇹
Inartis
2026-06-07 13:02:47
(1 week ago)
62.72.37.112 - - [07/Jun/2026:15:02:46 +0200] "GET /admin/.env HTTP/1.1" 302 7605 "-" "Mozilla/5.0 ( ...
show more
62.72.37.112 - - [07/Jun/2026:15:02:46 +0200] "GET /admin/.env HTTP/1.1" 302 7605 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 12:35:43
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 62.72.37.112 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 62.72.37.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 08:35:37.633629 2026] [security2:error] [pid 27650:tid 27650] [client 62.72.37.112:62748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yournamehereonline.net"] [uri "/member/.env"] [unique_id "aiVlmZQ-b0KVNMhQ3-5sHgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-07 11:41:18
(1 week ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 07:58:14
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 62.72.37.112 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 62.72.37.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 03:58:09.144738 2026] [security2:error] [pid 11971:tid 11971] [client 62.72.37.112:19084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iconconstructors.com"] [uri "/dev/.env"] [unique_id "aiUkkUFEfwimEa8EmTw6rgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack