🇺🇸
etu brutus
2026-10-09 04:41:17
(18 minutes ago)
105.158.169.200 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 03:28:20
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 105.158.169.200 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 105.158.169.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 23:28:14.984008 2026] [security2:error] [pid 29918:tid 29933] [client 105.158.169.200:38654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.destination-kitchen.com"] [uri "/.env"] [unique_id "ashfTi3UCAqnXBrG73B22gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-09 02:02:39
(2 hours ago)
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 10 ...
show more
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 105.158.169.200 - - \[09/Oct/2026:04:02:35 +0200\] "GET /.env HTTP/1.1" 404 7383 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
arsonist
2026-10-09 01:29:19
(3 hours ago)
[fail2ban]
2026-10-09T01:29:18.625643+00:00 arson caddy[1712]: {"level":"info","ts":1791509358.62560 ...
show more
[fail2ban]
2026-10-09T01:29:18.625643+00:00 arson caddy[1712]: {"level":"info","ts":1791509358.6256084,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"105.158.169.200","remote_port":"34146","client_ip":"105.158.169.200","proto":"HTTP/1.1","method":"GET","host":"grafana.arson.gg","uri":"/.env","headers":{"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"grafana.arson.gg","ech":false}},"bytes_read":0,"user_id":"","duration":0.000047198,"size":7,"status":418,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"],"Server":["Caddy"]}}
...
show less
Bad Web Bot
🇧🇪
boxed-it
2026-10-09 01:16:51
(3 hours ago)
GET /.env (Tarpitted for 2m10s, wasted 7.73kB)
Web App Attack
🇩🇪
IVski.com
2026-10-09 00:55:41
(4 hours ago)
IVski WAF | Sensitive file probe - looking for exposed .env
Hacking
Brute-Force
Web App Attack
🇨🇦
Anytech
2026-10-09 00:52:56
(4 hours ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking
🇺🇸
nyt
2026-10-09 00:49:42
(4 hours ago)
Sensitive File Probe, Empty UA + error
Web App Attack
🇺🇸
ZeroTrustSentinel
2026-10-09 00:48:23
(4 hours ago)
Hostile connection attempts and automated attack probe (honeypot-tripwire) detected and blocked.
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-10-09 00:41:52
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 105.158.169.200 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 105.158.169.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 20:41:47.017164 2026] [security2:error] [pid 9315:tid 9315] [client 105.158.169.200:46106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "footballxp.com"] [uri "/.env"] [unique_id "asg4S3dBwJrGmwl3NAQ5FgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-09 00:39:51
(4 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: definitelynotahoneypot.xyz | URI: /.env | UA: Unknown User-Agent | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
electra
2026-10-09 00:16:27
(4 hours ago)
Attempted to access path /.env (GET request)
Hacking
Brute-Force
Web App Attack
🇿🇦
conure.sh
2026-10-09 00:13:05
(4 hours ago)
csagent: score 20.4: secrets grab x2, 404 noise floor x2; 1 domain(s) in 1s
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-09 00:00:57
(4 hours ago)
[09/Oct/2026:03:00:53 +0300] -- 105.158.169.200 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[09/Oct/2026:03:00:53 +0300] -- 105.158.169.200 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /.env HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇳🇱
lns.bz
2026-10-09 00:00:17
(4 hours ago)
.env scanning [DOOZ]
Web App Attack
