๐บ๐ธ
TPI-Abuse
2026-10-07 17:00:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.23.93.32 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.93.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 13:00:11.323511 2026] [security2:error] [pid 25202:tid 25226] [client 82.23.93.32:52189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.com"] [uri "/.env"] [unique_id "asZ6m73QtO2XMYcgzoRziAAAARY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-10-01 09:03:13
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
๐ฌ๐ง
consul.to
2026-09-30 05:14:13
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-09-28 22:28:50
(2 weeks ago)
Brute-Force
Web App Attack
๐ซ๐ท
spot
2026-09-28 12:20:07
(2 weeks ago)
82.23.93.32 - - [28/Sep/2026:13:20:06 +0100] "GET /.env HTTP/1.1" 404 4662 "-" "Mozilla/5.0 (Windows ...
show more
82.23.93.32 - - [28/Sep/2026:13:20:06 +0100] "GET /.env HTTP/1.1" 404 4662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack
VPN IP
๐ซ๐ท
Stara
2026-09-28 04:55:15
(2 weeks ago)
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ...
show more
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja)
show less
Hacking
Brute-Force
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-09-27 22:23:56
(2 weeks ago)
Brute-Force
Web App Attack
๐จ๐ญ
lufi
2026-09-27 21:42:43
(2 weeks ago)
2026-09-27 23:42:43 82.23.93.32: blacklistedPath: /.env
...
Web Spam
Brute-Force
Hacking
Web App Attack
๐ฉ๐ช
LRob
2026-09-27 13:45:44
(2 weeks ago)
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show more
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /.env (+1 more) | 2026-09-27 13:45 UTC
show less
Hacking
Web App Attack
๐ฉ๐ช
macrob
2026-09-27 06:35:09
(2 weeks ago)
2026/09/27 06:35:06 [error] 3775368#3775368: *40987737 access forbidden by rule, client: 82.23.93.32 ...
show more
2026/09/27 06:35:06 [error] 3775368#3775368: *40987737 access forbidden by rule, client: 82.23.93.32, server: binixo.es, request: "GET /.env HTTP/1.1", host: "binixo.es"
2026/09/27 06:35:07 [error] 3775371#3775371: *40987770 access forbidden by rule, client: 82.23.93.32, server: binixo.es, request: "GET /.env.local HTTP/1.1", host: "binixo.es"
2026/09/27 06:35:08 [error] 3775373#3775373: *40987789 access forbidden by rule, client: 82.23.93.32, server: binixo.es, request: "GET /.env.production HTTP/1.1", host: "binixo.es"
...
show less
Web App Attack
๐ช๐ธ
robotstxt
2026-09-24 17:01:02
(2 weeks ago)
82.23.93.32 - - [24/Sep/2026:17:00:43 +0000] "GET /.env.local HTTP/1.1" 403 76778 "-" "Mozilla/5.0 ( ...
show more
82.23.93.32 - - [24/Sep/2026:17:00:43 +0000] "GET /.env.local HTTP/1.1" 403 76778 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" edge="82.23.93.32"
82.23.93.32 - - [24/Sep/2026:17:00:45 +0000] "GET /.env.production HTTP/1.1" 403 76778 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" edge="82.23.93.32"
82.23.93.32 - - [24/Sep/2026:17:00:46 +0000] "GET /.env.backup HTTP/1.1" 403 76793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" edge="82.23.93.32"
82.23.93.32 - - [24/Sep/2026:17:00:47 +0000] "GET /.git/config HTTP/1.1" 403 76778 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" edge="82.23.93.32"
82.23.93.32 - - [24/Sep/2026:17:00:48 +0000] "GET /.git/HEAD HTTP/1.1" 403 76785 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" edge="82.23.93.32"
...
show less
Web App Attack
๐บ๐ธ
H24
2026-09-24 04:54:32
(3 weeks ago)
/.env /.git/config
Web App Attack
๐ซ๐ท
dynamix
2026-09-23 00:50:16
(3 weeks ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
tecnoacquisti.com
2026-09-15 11:10:55
(1 month ago)
PrestaShop Security Module: suspicious probe path detected (/.env)
Web App Attack