🇳🇱
homeshowdomain.nl
2026-07-02 22:00:38
(1 week ago)
Auto-ban: >3000 req/min op 2026-07-02
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-07-02 12:24:47
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 156.146.39.149 (unn-156-146-39-149.cdn77.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 156.146.39.149 (unn-156-146-39-149.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 08:24:41.541132 2026] [security2:error] [pid 4261:tid 4261] [client 156.146.39.149:49881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mohsep-eg.com"] [uri "/.env"] [unique_id "akZYieiZYB3tnDVOk2vKMgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-07-02 12:05:03
(1 week ago)
Scanning/Probing (13)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 12:03:55
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 156.146.39.149 (unn-156-146-39-149.cdn77.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 156.146.39.149 (unn-156-146-39-149.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 08:03:50.495445 2026] [security2:error] [pid 13845:tid 13845] [client 156.146.39.149:10566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matteozacchino.com"] [uri "/.env"] [unique_id "akZTpjoX9VMk61RD8hasSwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-07-02 11:54:01
(1 week ago)
URL Probing: /.env
Web App Attack
🇩🇪
conseilgouz
2026-07-02 11:50:25
(1 week ago)
ave-17 : Block hidden directories=>/.env(/)
Hacking
🇺🇸
TPI-Abuse
2026-07-02 11:28:35
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 156.146.39.149 (unn-156-146-39-149.cdn77.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 156.146.39.149 (unn-156-146-39-149.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 07:28:32.904591 2026] [security2:error] [pid 20959:tid 20959] [client 156.146.39.149:44841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pioneercanadian.com"] [uri "/.env"] [unique_id "akZLYDP2lSzARDhDT-4V2QAAADY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-02 11:20:50
(1 week ago)
Multiple WAF Violations
Web App Attack
🇩🇪
ghostwarriors
2026-07-02 11:20:25
(1 week ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 11:10:28
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 156.146.39.149 (unn-156-146-39-149.cdn77.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 156.146.39.149 (unn-156-146-39-149.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 07:10:21.764181 2026] [security2:error] [pid 18651:tid 18651] [client 156.146.39.149:18998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4115thewestford.com"] [uri "/.env"] [unique_id "akZHHUPXljYIqALIXzkFvAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-07-02 11:08:22
(1 week ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.env
Web App Attack
🇩🇪
ksol-hostmaster
2026-07-02 11:05:05
(1 week ago)
2026/07/02 13:05:04 [error] 35069#102195: *752247 access forbidden by rule, client: 156.146.39.149, ...
show more
2026/07/02 13:05:04 [error] 35069#102195: *752247 access forbidden by rule, client: 156.146.39.149, server: karolyimusic.com, request: "GET /.env HTTP/1.1", host: "karolyimusic.com"
...
show less
Web Spam
🇩🇪
FeG Deutschland
2026-07-02 11:00:32
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
🇩🇪
SwinT
2026-07-02 11:00:06
(1 week ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
2026-01-21 10:50:13
(5 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking