🇧🇪
taivas.nl
2026-07-29 04:32:58
(2 days ago)
Many_bad_calls
Web App Attack
🇺🇸
mnsf
2026-07-28 19:05:32
(3 days ago)
Abuse Detected (92)
Brute-Force
Web App Attack
🇺🇸
CBJ
2026-07-28 18:42:51
(3 days ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 18:13:24
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 64.95.11.158 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.95.11.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 14:13:18.018878 2026] [security2:error] [pid 2177421:tid 2177421] [client 64.95.11.158:45428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.advisorstudios.cms2020.com"] [uri "/.env"] [unique_id "amjxPsV7ooSBz_P39LnSaAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-07-28 16:07:11
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇳🇴
Bots.go.to.hell
2026-07-28 15:14:17
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-env-access
Web App Attack
Hacking
2026-07-28 15:05:59
(3 days ago)
Blocked: Reason='Suspicious traffic score=70 (review-based detection)'; Requests=4
Hacking
🇩🇪
grassau.com
2026-07-28 13:58:06
(3 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 64.95.11.158 (US/Uni ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 64.95.11.158 (US/United States/Texas/Dallas/-)
show less
Bad Web Bot
2026-07-28 13:50:02
(3 days ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 12:36:13
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 64.95.11.158 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.95.11.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 08:36:07.330270 2026] [security2:error] [pid 950238:tid 950238] [client 64.95.11.158:43840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jennlaurenphotography.com.dcmillerjr.com"] [uri "/.env"] [unique_id "amiiN-BFv-Q6Hm8GtE6stAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 12:20:25
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 64.95.11.158 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.95.11.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 08:20:19.927123 2026] [security2:error] [pid 1018516:tid 1018516] [client 64.95.11.158:56438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.celebrateadoption.taltonfamily.com"] [uri "/.env"] [unique_id "amieg6PAwM1PBg82-aSpfgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 11:47:26
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 64.95.11.158 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.95.11.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 07:47:17.870787 2026] [security2:error] [pid 3378011:tid 3378011] [client 64.95.11.158:60308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "richardmay.org.infodrop.info"] [uri "/.env"] [unique_id "amiWxcYE0jgejGWo4hbFTQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2026-07-28 11:02:14
(3 days ago)
Bad_requests
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-28 08:29:20
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 64.95.11.158 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.95.11.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 04:29:15.925235 2026] [security2:error] [pid 767269:tid 767269] [client 64.95.11.158:38732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ticmatopografiaeingenieria.com.spyasociados.com"] [uri "/.env"] [unique_id "amhoW3iB_UeLyLw2tMr-MAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack