🇳🇱
Site.eu
2026-06-20 04:01:59
(3 weeks ago)
Excessive 404/403 errors
Brute-Force
🇬🇧
consul.to
2026-04-13 03:45:14
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
Vegascosmetics
2026-04-12 21:51:07
(2 months ago)
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
🇩🇪
Séfora Srl
2026-04-11 08:01:01
(3 months ago)
Failed attempt detected by Fail2Ban in recidive jail
Brute-Force
🇫🇷
dynamix
2026-04-11 07:23:46
(3 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-04-11 07:23:37
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 156.146.39.220 (unn-156-146-39-220.cdn77.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 156.146.39.220 (unn-156-146-39-220.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 03:23:31.627842 2026] [security2:error] [pid 2713633:tid 2713633] [client 156.146.39.220:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sportsbookcommission.com"] [uri "/.env"] [unique_id "adn282oNLE7a8kEkOrAwAQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-04-11 07:05:11
(3 months ago)
Scanning/Probing (50)
Brute-Force
Web App Attack
🇺🇸
wordpresshosting.solutions
2026-04-11 06:52:04
(3 months ago)
Web app vulnerability scanning detected. Evidence: 156.146.39.220 - - [11/Apr/2026:05:41:44 +0000] " ...
show more
Web app vulnerability scanning detected. Evidence: 156.146.39.220 - - [11/Apr/2026:05:41:44 +0000] "GET /.env HTTP/1.1" 404 67825 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
156.146.39.220 - - [11/Apr/2026:06:52:03 +0000] "GET /.env HTTP/1.1" 404 67825 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Web App Attack
🇩🇪
big-cloud.nl
2026-04-11 06:49:29
(3 months ago)
Try to access /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-04-11 06:19:46
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 156.146.39.220 (unn-156-146-39-220.cdn77.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 156.146.39.220 (unn-156-146-39-220.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 02:19:41.043631 2026] [security2:error] [pid 2616870:tid 2616870] [client 156.146.39.220:52835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.alafiariverrendezvous.org"] [uri "/.env"] [unique_id "adnn_UAt3vTJU6cjAnRxwAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-11 05:31:12
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 156.146.39.220 (unn-156-146-39-220.cdn77.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 156.146.39.220 (unn-156-146-39-220.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 01:31:06.518220 2026] [security2:error] [pid 2349529:tid 2349529] [client 156.146.39.220:39797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lbee.com"] [uri "/.env"] [unique_id "adncmuW8BqWkk-qICmAe2wAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-04-11 05:23:05
(3 months ago)
[redacted] 156.146.39.220 - - [11/Apr/2026:06:23:02 +0100] "GET /.env HTTP/2.0" 301 186 "-" "Mozilla ...
show more
[redacted] 156.146.39.220 - - [11/Apr/2026:06:23:02 +0100] "GET /.env HTTP/2.0" 301 186 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" [redacted] 156.146.39.220 - - [11/Apr/2026:06:23:02 +0100] "GET /fr/.env/ HTTP/2.0" 404 25535 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-04-11 04:35:30
(3 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
2026-04-11 04:32:22
(3 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇩🇪
FeG Deutschland
2026-04-11 04:31:12
(3 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack