🇧🇪
cmbplf
2026-04-08 23:26:22
(2 months ago)
989 requests with url.path *.env
Brute-Force
Bad Web Bot
🇬🇧
Axel
2026-04-08 22:44:56
(2 months ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env Server: ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
🇵🇱
lns.bz
2026-04-08 22:44:40
(2 months ago)
Web app attack [PL.Lu]
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 22:18:03
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 80.76.49.205 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 80.76.49.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 18:17:56.088969 2026] [security2:error] [pid 2652419:tid 2652419] [client 80.76.49.205:54318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [uri "/.env"] [unique_id "adbUFH8umO0qJNqQnMHDRAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-04-08 22:06:21
(2 months ago)
Too many Status 40X (11)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-04-08 22:00:53
(2 months ago)
Auto-ban: >3000 req/min op 2026-04-08
Web App Attack
SSH
Hacking
🇩🇪
Ba-Yu
2026-04-08 21:54:28
(2 months ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 21:51:27
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 80.76.49.205 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 80.76.49.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 17:51:22.491354 2026] [security2:error] [pid 3890926:tid 3890926] [client 80.76.49.205:52597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "48consultancy.com"] [uri "/.env"] [unique_id "adbN2vK00e2nAd0ZCm7nMgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 21:34:56
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 80.76.49.205 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 80.76.49.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 17:34:52.245926 2026] [security2:error] [pid 3280204:tid 3280204] [client 80.76.49.205:51652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "2massociatesllc.com"] [uri "/.env"] [unique_id "adbJ_MSOn8pInwXw-RhjjQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-04-08 21:25:52
(2 months ago)
IM360 WAF: Laravel .env file access
Web App Attack
🇩🇪
FeG Deutschland
2026-04-08 21:24:44
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 21:15:05
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 80.76.49.205 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 80.76.49.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 17:14:59.802263 2026] [security2:error] [pid 382410:tid 382410] [client 80.76.49.205:63075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestattorneys.com"] [uri "/.env"] [unique_id "adbFUyNv0Rd9_W2Vrn5-QQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-04-08 21:14:18
(2 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2024-06-30 21:31:03
(1 year ago)
lfd: (sshd) Failed SSH login
Brute-Force
SSH
🇨🇦
KIsmay
2024-06-30 19:24:52
(1 year ago)
Jun 30 15:24:44 www4 sshd[3585371]: Failed password for root from 80.76.49.205 port 53984 ssh2
Jun 3 ...
show more
Jun 30 15:24:44 www4 sshd[3585371]: Failed password for root from 80.76.49.205 port 53984 ssh2
Jun 30 15:24:45 www4 sshd[3585385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.76.49.205 user=root
Jun 30 15:24:48 www4 sshd[3585385]: Failed password for root from 80.76.49.205 port 33824 ssh2
Jun 30 15:24:50 www4 sshd[3585405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.76.49.205 user=root
Jun 30 15:24:52 www4 sshd[3585405]: Failed password for root from 80.76.49.205 port 33840 ssh2
...
show less
Brute-Force
SSH