🇧🇪
cmbplf
2026-07-13 19:51:26
(3 days ago)
161 requests with url.path *.env
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-13 18:32:34
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 62.93.179.146 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 62.93.179.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 14:32:31.241832 2026] [security2:error] [pid 1418:tid 1418] [client 62.93.179.146:53012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alsdepot.com"] [uri "/.env"] [unique_id "alUvP4fl3MDsnaKANxVHCQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-13 18:27:23
(3 days ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇫🇷
masterguru
2026-07-13 18:09:51
(3 days ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 18:07:47
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 62.93.179.146 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 62.93.179.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 14:07:42.232246 2026] [security2:error] [pid 2088396:tid 2088396] [client 62.93.179.146:59484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barkatthemoonpetsitting.com"] [uri "/.env"] [unique_id "alUpburFBBsGLLat0gPjqgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 17:51:56
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 62.93.179.146 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 62.93.179.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 13:51:53.543662 2026] [security2:error] [pid 25262:tid 25262] [client 62.93.179.146:50127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barbaraedidin.com"] [uri "/.env"] [unique_id "alUlubYzHPchZeN_dbYBmgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Lee Daniel
2026-07-13 17:51:07
(3 days ago)
62.93.179.146 - - [13/Jul/2026:13:51:07 -0400] "GET /.env HTTP/1.1" 403 6304 "-" "Mozilla/5.0 (Linux ...
show more
62.93.179.146 - - [13/Jul/2026:13:51:07 -0400] "GET /.env HTTP/1.1" 403 6304 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.7632.26 Mobile Safari/537.36"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
matthieul.dev
2026-07-05 14:45:24
(1 week ago)
Blocked by os-abuseipdb; 11 hits, proto=tcp,udp, ports=61440
Port Scan
Brute-Force
🇷🇺
Dmitriy Erokhin
2026-06-09 12:00:24
(1 month ago)
Brute-Force
🇳🇱
BIV
2026-06-08 20:39:24
(1 month ago)
Honeypot multi-source hit. Sources: dshield:fw,tpot:Suricata. Ports: 137. Automated tiered (T-Pot+DS ...
show more
Honeypot multi-source hit. Sources: dshield:fw,tpot:Suricata. Ports: 137. Automated tiered (T-Pot+DShield).
show less
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-05-15 15:13:17
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 62.93.179.146 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 62.93.179.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 11:13:13.596100 2026] [security2:error] [pid 455:tid 455] [client 62.93.179.146:59815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chrisbilder.com"] [uri "/.env"] [unique_id "agc4CXKkzxA1W7VBGHlrigAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
RoboSOC
2026-04-29 05:22:09
(2 months ago)
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
Port Scan
🇦🇺
MAGIC
2026-04-29 00:30:16
(2 months ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-29 00:03:28
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 62.93.179.146 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 62.93.179.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 20:03:23.538058 2026] [security2:error] [pid 2532:tid 2554] [client 62.93.179.146:52178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3dfilament.com"] [uri "/.env"] [unique_id "afFKy_fPMzA9dHRCQ9I0NgAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-04-28 23:47:51
(2 months ago)
IM360 WAF: Laravel .env file access
Web App Attack