|
🇬🇧
martenmark
|
|
66.187.5.120 - - [04/Jun/2026:13:19:00 +0000] "GET /.env.local HTTP/1.1" 403 669 "-" "Mozilla/5.0 (c ...
show more
66.187.5.120 - - [04/Jun/2026:13:19:00 +0000] "GET /.env.local HTTP/1.1" 403 669 "-" "Mozilla/5.0 (compatible; keyhunt/2.0)"
...
show less
|
Web App Attack
|
|
|
🇫🇷
ELYAZ
|
|
(y3) Failed access -byebye- from 66.187.5.120 (US/United States/-): (CF_ENABLE)
|
Hacking
|
|
|
Anonymous
|
|
Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=32
|
Hacking
|
|
|
🇩🇪
mxbl
|
|
Scanning for CMS vulnerabilities on a non-CMS system: /.git/config
|
Web App Attack
|
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
|
🇩🇪
macrob
|
|
2026/05/29 08:07:47 [error] 4160936#4160936: *265085261 access forbidden by rule, client: 66.187.5.1 ...
show more
2026/05/29 08:07:47 [error] 4160936#4160936: *265085261 access forbidden by rule, client: 66.187.5.120, server: binixo.co, request: "GET /.env HTTP/1.1", host: "binixo.co"
2026/05/29 08:07:47 [error] 4160932#4160932: *265085190 access forbidden by rule, client: 66.187.5.120, server: binixo.co, request: "GET /.env.local HTTP/1.1", host: "binixo.co"
2026/05/29 08:07:48 [error] 4160936#4160936: *265085261 access forbidden by rule, client: 66.187.5.120, server: binixo.co, request: "GET /.env.production HTTP/1.1", host: "binixo.co"
...
show less
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 66.187.5.120 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.187.5.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 23:51:00.002354 2026] [security2:error] [pid 26953:tid 26953] [client 66.187.5.120:50631] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cmexico.co"] [uri "/.env"] [unique_id "ahkNJFktEoXDV7J5N1vzUwAAACo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
macrob
|
|
2026/05/28 23:13:26 [error] 4096446#4096446: *264054138 access forbidden by rule, client: 66.187.5.1 ...
show more
2026/05/28 23:13:26 [error] 4096446#4096446: *264054138 access forbidden by rule, client: 66.187.5.120, server: binixo.co, request: "GET /.env HTTP/1.1", host: "binixo.co"
2026/05/28 23:13:27 [error] 4096446#4096446: *264054140 access forbidden by rule, client: 66.187.5.120, server: binixo.co, request: "GET /.env.local HTTP/1.1", host: "binixo.co"
2026/05/28 23:13:27 [error] 4096445#4096445: *264054098 access forbidden by rule, client: 66.187.5.120, server: binixo.co, request: "GET /.env.production HTTP/1.1", host: "binixo.co"
...
show less
|
Web App Attack
|
|
|
🇩🇪
bescared
|
|
F2B - Malicious activity detected. URL Probing. -c23856ef-
|
Hacking
Bad Web Bot
Web App Attack
|
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
|
🇩🇪
macrob
|
|
2026/05/28 10:31:28 [error] 4016242#4016242: *262817241 access forbidden by rule, client: 66.187.5.1 ...
show more
2026/05/28 10:31:28 [error] 4016242#4016242: *262817241 access forbidden by rule, client: 66.187.5.120, server: binixo.co, request: "GET /.env HTTP/1.1", host: "binixo.co"
2026/05/28 10:31:30 [error] 4016242#4016242: *262817241 access forbidden by rule, client: 66.187.5.120, server: binixo.co, request: "GET /.env.local HTTP/1.1", host: "binixo.co"
2026/05/28 10:31:30 [error] 4016242#4016242: *262817241 access forbidden by rule, client: 66.187.5.120, server: binixo.co, request: "GET /.env.production HTTP/1.1", host: "binixo.co"
...
show less
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 66.187.5.120 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.187.5.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 23:21:22.706817 2026] [security2:error] [pid 24664:tid 24664] [client 66.187.5.120:58318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindtoken.app"] [uri "/.env.local"] [unique_id "ahe0slE335LrjMQmTr1GvQAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
|
🇩🇪
macrob
|
|
2026/05/27 22:22:32 [error] 3951710#3951710: *261461735 access forbidden by rule, client: 66.187.5.1 ...
show more
2026/05/27 22:22:32 [error] 3951710#3951710: *261461735 access forbidden by rule, client: 66.187.5.120, server: binixo.co, request: "GET /.env HTTP/1.1", host: "binixo.co"
2026/05/27 22:22:32 [error] 3951710#3951710: *261461735 access forbidden by rule, client: 66.187.5.120, server: binixo.co, request: "GET /.env.local HTTP/1.1", host: "binixo.co"
2026/05/27 22:22:33 [error] 3951710#3951710: *261461735 access forbidden by rule, client: 66.187.5.120, server: binixo.co, request: "GET /.env.production HTTP/1.1", host: "binixo.co"
...
show less
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 66.187.5.120 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.187.5.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 17:03:18.068901 2026] [security2:error] [pid 14554:tid 14554] [client 66.187.5.120:57049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arabou.co"] [uri "/.env"] [unique_id "ahdcFtl2GqoZ7k5VJERlbgAAABE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|