This IP address has been reported a total of
21
times from
14 distinct
sources.
129.146.139.56 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[2026-10-25 15:59:57] Probing for exploits [1 requests]
"GET /vendor/phpunit/phpunit/src/Util/PHP/ ...
show more[2026-10-25 15:59:57] Probing for exploits [1 requests]
"GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301
show less
[2026-10-25 14:39:51] Probing for exploits [1 requests]
"GET /vendor/phpunit/phpunit/src/Util/PHP/ ...
show more[2026-10-25 14:39:51] Probing for exploits [1 requests]
"GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301
show less
988 requests with url.path *.env
177 requests with url.path /vendor/phpunit/phpunit/src/Util/PHP/e ...
show more988 requests with url.path *.env
177 requests with url.path /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
show less
(mod_security) mod_security (id:210492) triggered by 129.146.139.56 (-): 1 in the last 300 secs; Por ...
show more(mod_security) mod_security (id:210492) triggered by 129.146.139.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 07:53:07.615301 2026] [security2:error] [pid 20513:tid 20513] [client 129.146.139.56:56732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "humans2humans.org"] [uri "/.env"] [unique_id "at3to6A7wFNeJ-UeKdv66AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /admin/.env HTTP/1.1, GET /edi-connect.nl/.env HTTP/1.1, ...
show moreBot / scanning and/or hacking attempts: GET /admin/.env HTTP/1.1, GET /edi-connect.nl/.env HTTP/1.1, GET /vendor/.env HTTP/1.1, GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.
show less
Not following 301 redirects — wasted requests | method: GET | path: / | ua: python-requests/2.24.0 | ...
show moreNot following 301 redirects — wasted requests | method: GET | path: / | ua: python-requests/2.24.0 | 2026-10-25 07:10 UTC
show less
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 129.146.139.56 - - [25/Oct/2026:00:42:17 +0200] "GET /.env HTTP/1.1" 301 491 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Showing 1 to
15
of 21 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩