🇹🇭
thaizone.com
2026-02-03 14:15:27
(6 months ago)
High probability of spam (Score: 23.50)
Email Spam
🇳🇱
BlueWire Hosting
2025-03-18 05:10:36
(1 year ago)
Detected as a bad bot
Bad Web Bot
🇺🇦
URAN Publishing Service
2025-03-18 04:22:14
(1 year ago)
50.6.204.11 - - [18/Mar/2025:06:22:06 +0200] "GET /.env HTTP/1.1" 404 2865 "-" "python-requests/2.25 ...
show more
50.6.204.11 - - [18/Mar/2025:06:22:06 +0200] "GET /.env HTTP/1.1" 404 2865 "-" "python-requests/2.25.1"
50.6.204.11 - - [18/Mar/2025:06:22:14 +0200] "GET /.env HTTP/1.1" 404 2863 "-" "python-requests/2.25.1"
...
show less
Web App Attack
2025-03-18 04:08:04
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted] 50.6.204.11 (US/United States/server.cp ...
show more
(mod_security) mod_security triggered on hostname [redacted] 50.6.204.11 (US/United States/server.cp.kokosny.com)
show less
SQL Injection
🇩🇪
sdos.es
2025-03-18 03:54:02
(1 year ago)
"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"
Web App Attack
2025-03-18 03:34:33
(1 year ago)
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET /staging/.env HTTP/1.1, GET /admin/. ...
show more
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET /staging/.env HTTP/1.1, GET /admin/.env HTTP/1.1, GET /.env.example HTTP/1.1, GET /public/.env HTTP/1.1
show less
Hacking
Web App Attack
🇩🇪
Linux-Tech
2025-03-18 02:39:19
(1 year ago)
50.6.204.11 - - [18/Mar/2025:03:39:09 +0100] "GET /.env HTTP/1.1" 403 2571 "-" "python-requests/2.25 ...
show more
50.6.204.11 - - [18/Mar/2025:03:39:09 +0100] "GET /.env HTTP/1.1" 403 2571 "-" "python-requests/2.25.1" 50.6.204.11 - - [18/Mar/2025:03:39:19 +0100] "GET /public/.env HTTP/1.1" 403 2576 "-" "python-requests/2.25.1"
show less
Port Scan
Bad Web Bot
Web App Attack
🇬🇧
enpepet
2025-03-18 02:23:58
(1 year ago)
GENERAL: parametres: [url:env=] UA:python-requests/2.25.1 URL:/.env
Port Scan
Hacking
Brute-Force
Bad Web Bot
🇩🇪
nextweb
2025-03-18 02:01:09
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 50.6.204.11 (US/United States/-/-/server.cp.kok ...
show more
(mod_security) mod_security (id:210492) triggered by 50.6.204.11 (US/United States/-/-/server.cp.kokosny.com/[AS19871 NETWORK-SOLUTIONS-HOSTING]): 5 in the last 3600 secs (CF_ENABLE)
show less
Brute-Force
🇬🇧
Aetherweb Ark
2025-03-18 00:01:50
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 50.6.204.11 (US/United States/server.cp.kokosny ...
show more
(mod_security) mod_security (id:210492) triggered by 50.6.204.11 (US/United States/server.cp.kokosny.com): N in the last X secs
show less
Web App Attack
2025-03-17 23:44:13
(1 year ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2025-03-17 23:29:58
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 50.6.204.11 (server.cp.kokosny.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 50.6.204.11 (server.cp.kokosny.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 19:29:50.285286 2025] [security2:error] [pid 18941:tid 19004] [client 50.6.204.11:50070] [client 50.6.204.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weareledsigns.spinningdesigns.com"] [uri "/.env"] [unique_id "Z9iwbq8GN6SuCio_yV1bPwAAAUw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-17 22:56:36
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 50.6.204.11 (server.cp.kokosny.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 50.6.204.11 (server.cp.kokosny.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 18:56:31.691458 2025] [security2:error] [pid 2663094:tid 2663094] [client 50.6.204.11:53072] [client 50.6.204.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vintagewet.com"] [uri "/.env"] [unique_id "Z9ion2tf7vg8cda73ZqFKQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-17 22:16:20
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 50.6.204.11 (server.cp.kokosny.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 50.6.204.11 (server.cp.kokosny.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 18:16:17.436199 2025] [security2:error] [pid 16701:tid 16701] [client 50.6.204.11:54736] [client 50.6.204.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "usataxgroup.com"] [uri "/.env"] [unique_id "Z9ifMQJiqG4ZdJlX2NP0wgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-17 19:49:34
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 50.6.204.11 (server.cp.kokosny.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 50.6.204.11 (server.cp.kokosny.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 15:49:27.648051 2025] [security2:error] [pid 20376:tid 20376] [client 50.6.204.11:39714] [client 50.6.204.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegitsmovie.com"] [uri "/.env"] [unique_id "Z9h8x4z0JHVYdoQ8MEz1ZgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack