🇮🇱
spd.co.il
2026-06-03 13:03:56
(2 months ago)
Web application attack detected
Hacking
Web App Attack
🇬🇧
openstrike.co.uk
2026-06-02 05:14:01
(2 months ago)
4 attacks on VC URLs, env grabbing URLs:
GET /.git/HEAD HTTP/1.1
GET /.env HTTP/1.1
Hacking
🇺🇸
TPI-Abuse
2026-06-01 13:49:23
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 149.28.106.13 (149.28.106.13.vultrusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 149.28.106.13 (149.28.106.13.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 09:49:19.445846 2026] [security2:error] [pid 9629:tid 9629] [client 149.28.106.13:59420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accu-tuner.com"] [uri "/.env"] [unique_id "ah2N3-dKhE2bl16pQGWQEQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-06-01 12:56:03
(2 months ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 12:39:19
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 149.28.106.13 (149.28.106.13.vultrusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 149.28.106.13 (149.28.106.13.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 08:39:15.968759 2026] [security2:error] [pid 17850:tid 17850] [client 149.28.106.13:40944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nrvoutdoors.com"] [uri "/.env"] [unique_id "ah19c_o3f3JK8ro22OsLBQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
tinyshield.me
2021-10-06 09:48:17
(4 years ago)
Provided by tinyshield.me - Simple Security For WordPress
Brute-Force
Web App Attack
🇫🇷
sololinux.es
2021-10-04 12:35:59
(4 years ago)
149.28.106.13 - - [04/Oct/2021:18:35:58 +0200] "POST /wp-login.php HTTP/1.0" 200 3914 "-" "Mozilla/5 ...
show more
149.28.106.13 - - [04/Oct/2021:18:35:58 +0200] "POST /wp-login.php HTTP/1.0" 200 3914 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇨🇿
plzenskypruvodce.cz
2021-10-04 06:12:15
(4 years ago)
Oct 4 12:12:12 b-vps wordpress(www.tzb-chmelarova.cz)[1942120]: Authentication attempt for unknown ...
show more
Oct 4 12:12:12 b-vps wordpress(www.tzb-chmelarova.cz)[1942120]: Authentication attempt for unknown user chmelda from 149.28.106.13
...
show less
Brute-Force
🇻🇳
websase.com
2021-10-04 05:12:01
(4 years ago)
WordPress Login Brute Force Attacks
Brute-Force
Web App Attack
🇩🇪
Tha_14
2021-10-04 04:44:22
(4 years ago)
Attempt to log in with non-existing username: admin
Bad Web Bot
🇨🇦
KIsmay
2021-10-04 00:26:28
(4 years ago)
WordPress Brute Force, 5 attempts
Brute-Force
Web App Attack
🇫🇷
Yepngo
2021-10-04 00:12:47
(4 years ago)
149.28.106.13 - - [04/Oct/2021:04:12:43 +0000] "POST /wp-login.php HTTP/1.1" 200 9703 "-" "Mozilla/5 ...
show more
149.28.106.13 - - [04/Oct/2021:04:12:43 +0000] "POST /wp-login.php HTTP/1.1" 200 9703 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
149.28.106.13 - - [04/Oct/2021:04:12:46 +0000] "POST /wp-login.php HTTP/1.1" 200 9704 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇫🇷
sololinux.es
2021-10-03 22:33:36
(4 years ago)
149.28.106.13 - - [04/Oct/2021:04:33:35 +0200] "POST /wp-login.php HTTP/1.0" 200 3915 "-" "Mozilla/5 ...
show more
149.28.106.13 - - [04/Oct/2021:04:33:35 +0200] "POST /wp-login.php HTTP/1.0" 200 3915 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇸🇬
pusathosting.com
2021-10-03 16:05:05
(4 years ago)
ang 149.28.106.13 {kunara.id} "POST /wp-login.php 200
149.28.106.13 {suratmenyurat.abi-blog.com} "PO ...
show more
ang 149.28.106.13 {kunara.id} "POST /wp-login.php 200
149.28.106.13 {suratmenyurat.abi-blog.com} "POST /wp-login.php 200
149.28.106.13 {smkpgri13sby.sch.id} "POST /wp-login.php 200
show less
Brute-Force
Web App Attack
🇫🇷
security.rdmc.fr
2021-10-03 10:39:34
(4 years ago)
Automatic report - Banned IP Access
Web App Attack