🇻🇮
Axel
2026-11-06 13:00:40
UTC ·
(1 hour ago)
WAF/ModSecurity blocked 66 malicious request(s) (HTTP 403) from this IP. Activity: request_uri: .ENV Files x63; blocked sensitive path x2; request_uri: CVE-2017-9841 x1. Latest: 2026-11-06T13:00:40Z.
Hacking
Brute-Force
Web App Attack
🇻🇮
Axel
2026-11-06 08:28:35
UTC ·
(5 hours ago)
WAF/ModSecurity blocked 73 malicious request(s) (HTTP 403) from this IP. Activity: Malicious IP behind the proxy detected x73. Latest: 2026-11-06T08:28:35Z.
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 07:46:12
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 132.145.157.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 02:46:07.114466 2026] [security2:error] [pid 2460:tid 2460] [client 132.145.157.78:57110] M ...
show more
(mod_security) mod_security (id:210492) triggered by 132.145.157.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 02:46:07.114466 2026] [security2:error] [pid 2460:tid 2460] [client 132.145.157.78:57110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "red-jacket.com"] [uri "/.env.bak"] [unique_id "au2Fv8YoGcwQp1KnVZJQHwAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
sms.ru
2026-11-06 06:54:31
UTC ·
(7 hours ago)
/vendor/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 06:17:19
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 132.145.157.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:17:15.517338 2026] [security2:error] [pid 28674:tid 28674] [client 132.145.157.78:59516] ...
show more
(mod_security) mod_security (id:210492) triggered by 132.145.157.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:17:15.517338 2026] [security2:error] [pid 28674:tid 28674] [client 132.145.157.78:59516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realsugardaddy.com"] [uri "/.env.bak"] [unique_id "au1w60eOyprly3nHBkAxKgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Agaman
2026-11-06 06:07:09
UTC ·
(7 hours ago)
Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-06 06:07 UTC. Samples: GET /.env.bak 444; GET /.env.local 444; GET /.env.production 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ...
show more
Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-06 06:07 UTC. Samples: GET /.env.bak 444; GET /.env.local 444; GET /.env.production 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban.
show less
Web App Attack
2026-11-06 05:56:46
UTC ·
(8 hours ago)
Banned by Fail2Ban on server
Web App Attack
🇫🇷
dynamix
2026-11-06 05:50:17
UTC ·
(8 hours ago)
Multiple WAF Violations
Web App Attack
🇨🇭
zynex
2026-11-06 05:36:09
UTC ·
(8 hours ago)
URL Probing: /.env
Web App Attack
🇺🇸
IndigoRidge
2026-11-06 05:04:37
UTC ·
(8 hours ago)
[06/Nov/2026:00:04:36.510609 --0500] au1f5DABt-5iGw3dJTJJ5QAAAMo 132.145.157.78 47556 205.233.18.17 7081
[06/Nov/2026:00:04:36.547667 --0500] au1f5KZuObQL2iHQfE5dwQAAAJM 132.145.157.78 47560 205.233.18.17 7081
[06/Nov/2026:00:04:36.584747 --0500] au1 ...
show more
[06/Nov/2026:00:04:36.510609 --0500] au1f5DABt-5iGw3dJTJJ5QAAAMo 132.145.157.78 47556 205.233.18.17 7081
[06/Nov/2026:00:04:36.547667 --0500] au1f5KZuObQL2iHQfE5dwQAAAJM 132.145.157.78 47560 205.233.18.17 7081
[06/Nov/2026:00:04:36.584747 --0500] au1f5P9RS3yMEXmGhDKjmAAAABc 132.145.157.78 47574 205.233.18.17 7081
[06/Nov/2026:00:04:36.621239 --0500] au1f5BQ61AIrNeFSiKD9KgAAAUQ 132.145.157.78 47576 205.233.18.17 7081
[06/Nov/2026:00:04:36.658510 --0500] au1f5KZuObQL2iHQfE5dwgAAAII 132.145.157.78 47592 205.233.18.17 7081
...
show less
Hacking
🇬🇧
consul.to
2026-11-06 04:35:59
UTC ·
(9 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Alt255
2026-11-06 00:17:31
UTC ·
(13 hours ago)
[cb17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 132.145.157.78 - - [06/Nov/2026:01:17:14 +0100] "GET /.env.bak HTTP/1.1" 301 514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show more
[cb17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 132.145.157.78 - - [06/Nov/2026:01:17:14 +0100] "GET /.env.bak HTTP/1.1" 301 514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
...
show less
Bad Web Bot
Web App Attack
2026-11-05 23:05:18
UTC ·
(14 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇷
security.rdmc.fr
2026-11-05 22:08:09
UTC ·
(15 hours ago)
Web scan: request for a sensitive file (.env, .git, wp-config...)
Web App Attack
Bad Web Bot
🇮🇱
spd.co.il
2026-11-05 22:01:36
UTC ·
(16 hours ago)
Web application attack detected
Hacking
Web App Attack
