🇩🇪
filstal.org
2026-07-07 14:31:03
(1 day ago)
CrowdSec: crowdsecurity/postfix-non-smtp-command
Email Spam
Hacking
2026-07-05 04:31:00
(4 days ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇮🇹
Progetto1
2026-06-29 09:03:02
(1 week ago)
Mail - Multiple failed login attempts
Brute-Force
Exploited Host
🇧🇪
boxed-it
2026-06-26 11:05:57
(1 week ago)
GET /config/.env (Tarpitted for 1d15h8m35s, wasted 8.06MB)
Web App Attack
🇧🇪
boxed-it
2026-06-24 10:14:52
(2 weeks ago)
GET /config/secrets.yaml (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
🇲🇳
Public CSIRT/CC of Mongolia
2026-06-19 16:03:16
(2 weeks ago)
Honeypot hit: Incoming HTTP traffic on port 81
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-19 11:55:47
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 146.56.112.110 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 146.56.112.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 07:55:39.719868 2026] [security2:error] [pid 22505:tid 22505] [client 146.56.112.110:54058] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.garyandthegroove.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.garyandthegroove.com"] [uri "/telegram_messages.db"] [unique_id "ajUuO7JdeOV-TRZIXH2A4QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-06-18 13:51:54
(2 weeks ago)
Email account brute force: 1 attempts were recorded from 146.56.112.110
2026-06-18T15:37:30+02:00 wa ...
show more
Email account brute force: 1 attempts were recorded from 146.56.112.110
2026-06-18T15:37:30+02:00 warning: unknown[146.56.112.110]: SASL PLAIN authentication failed: authentication failure, [email protected]
show less
Brute-Force
🇨🇭
backslash
2026-06-17 22:33:00
(3 weeks ago)
Web Spam
🇲🇳
Public CSIRT/CC of Mongolia
2026-06-17 08:28:33
(3 weeks ago)
Honeypot hit: Incoming HTTP traffic on port 81
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-16 23:07:49
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 146.56.112.110 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 146.56.112.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 19:07:45.057606 2026] [security2:error] [pid 15468:tid 15468] [client 146.56.112.110:49660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.qxoticdivas.postermodelsworldwideinc.com"] [uri "/.env.test"] [unique_id "ajHXQXgifvXG8uUuZ3QFagAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 05:17:44
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 146.56.112.110 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 146.56.112.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 01:17:40.731955 2026] [security2:error] [pid 31795:tid 31811] [client 146.56.112.110:35024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "richardleeweatherman.com"] [uri "/.env.development"] [unique_id "ajDcdKlncVosehAUz-tOIAAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 01:46:06
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 146.56.112.110 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 146.56.112.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 21:45:59.107699 2026] [security2:error] [pid 29474:tid 29531] [client 146.56.112.110:34654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradomohs.aafm.us"] [uri "/.env"] [unique_id "ajCq15LArBP-zRqwUT9NAgAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 01:00:55
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 146.56.112.110 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 146.56.112.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 21:00:47.613706 2026] [security2:error] [pid 19367:tid 19367] [client 146.56.112.110:51712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.construction.bonefrog.com"] [uri "/.env.save"] [unique_id "ajCgPxMdKlICdmkDWYApvQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 16:21:56
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 146.56.112.110 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 146.56.112.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 12:21:50.388576 2026] [security2:error] [pid 22488:tid 22488] [client 146.56.112.110:47462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ilandman.com"] [uri "/.env.development"] [unique_id "ajAmnsgIct_tuuulKX3N_QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack