🇩🇪
Vegascosmetics
2026-09-04 02:34:41
(2 minutes ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 85>=65, Abuse 100, NonEU, first-seen)
show less
Hacking
Exploited Host
Web App Attack
🇿🇦
conure.sh
2026-09-04 02:22:25
(14 minutes ago)
csagent: score 21.6: botnet path probe x3, secrets grab x1; 1 domain(s) in 7s
Web App Attack
🇳🇱
Site.eu
2026-09-04 01:54:00
(43 minutes ago)
Excessive multi-domain requests
Brute-Force
🇹🇷
muratkaya665
2026-09-04 01:47:53
(49 minutes ago)
IPS Attack Blocked by server.mura******.com.tr Fortigate-80E. Attack Name: Vite.server.fs.deny.raw.A ...
show more
IPS Attack Blocked by server.mura******.com.tr Fortigate-80E. Attack Name: Vite.server.fs.deny.raw.Arbitrary.File.Read. Dest Port: 80. Service: HTTP. Message: applications3: Vite.server.fs.deny.raw.Arbitrary.File.Read.
show less
Hacking
🇺🇸
TPI-Abuse
2026-09-04 01:20:55
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 21:20:50.615220 2026] [security2:error] [pid 15280:tid 15280] [client 104.155.199.43:38062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.averye.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252froot/.env"] [unique_id "apoc8sFj6If6Tk72l1LGXQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 00:54:16
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 20:54:08.965794 2026] [security2:error] [pid 26380:tid 26380] [client 104.155.199.43:29040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.arteseros.com"] [uri "/@fs/.env"] [unique_id "apoWsKi9l9gCrukmga14VgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 00:25:08
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 20:25:02.365395 2026] [security2:error] [pid 7541:tid 7541] [client 104.155.199.43:24796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.syscomprint.com"] [uri "/@fs/src/.env"] [unique_id "apoP3sBeek87MonrOqdDzAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 23:52:27
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 19:52:24.993422 2026] [security2:error] [pid 16046:tid 16046] [client 104.155.199.43:61008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.emisoni.com"] [uri "/@fs/.env"] [unique_id "apoIOMVPDPpRVlA37F0pCwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-03 23:05:54
(3 hours ago)
Scanning/Probing (26)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 22:55:52
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:55:44.740541 2026] [security2:error] [pid 1971982:tid 1972010] [client 104.155.199.43:15422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "browbrew.metalartgate.com"] [uri "/@fs/src/.env"] [unique_id "apn68NVa8eF39Ox__qzixwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-03 22:35:17
(4 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇳🇱
homeshowdomain.nl
2026-09-03 21:59:07
(4 hours ago)
Auto-ban: >3000 req/min op 2026-09-03
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-03 21:50:55
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:50:48.513695 2026] [security2:error] [pid 24986:tid 24986] [client 104.155.199.43:46162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.derekvantreese.com"] [uri "/@fs/.env.local"] [unique_id "apnruLbeFWA2xQAwbvqGBgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 21:33:28
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.155.199.43 (43.199.155.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:33:20.819642 2026] [security2:error] [pid 29383:tid 29383] [client 104.155.199.43:37430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ipostsocialmedia.com"] [uri "/@fs/.env"] [unique_id "apnnoFyRPuaXyQ0JyjiTigAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-03 20:28:53
(6 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking