🇳🇱
Mangelot Hosting
2026-05-13 23:10:04
(1 month ago)
(modsecurity) srv102 ModSecurity 15.235.154.185 (ID/Indonesia/vb185.d.thevoicesolutions.com): 10 in ...
show more
(modsecurity) srv102 ModSecurity 15.235.154.185 (ID/Indonesia/vb185.d.thevoicesolutions.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇳🇱
Site.eu
2026-05-11 12:02:46
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
BlueWire Hosting
2026-05-11 09:03:20
(1 month ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇳🇱
Savvii
2026-05-10 14:38:40
(1 month ago)
67 attempts against mh_ha-misbehave-ban on tin
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-05 19:06:37
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 15:06:32.105330 2026] [security2:error] [pid 23528:tid 23528] [client 15.235.154.185:60468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.catking.net"] [uri "/.env.local"] [unique_id "afo_uHQSAErLSO1y-iQDYwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-05 16:17:29
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 12:17:26.111661 2026] [security2:error] [pid 7994:tid 7994] [client 15.235.154.185:55434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.designamb.com"] [uri "/.env.production"] [unique_id "afoYFi3RZmNdf8d2B0Un9wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-05-05 03:30:30
(1 month ago)
200 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇫🇮
[email protected]
2026-05-03 11:19:10
(1 month ago)
Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on www.eventbank.live (Di ...
show more
Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on www.eventbank.live (Directory traversal #1) 15.235.154.185 (SG/Singapore/vb185.d.thevoicesolutions.com): 1 in the last 3600 secs (CF_ENABLE); IP: 15.235.154.185; Ports: *; Direction: 0; Trigger: LF_CUSTOMTRIGGER;
show less
Web App Attack
🇧🇪
boxed-it
2026-04-30 02:00:36
(1 month ago)
GET /.env (Tarpitted for 1d15h8m29s, wasted 8.06MB)
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 22:42:20
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 18:42:14.440800 2026] [security2:error] [pid 27587:tid 27587] [client 15.235.154.185:39626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ahijado.org"] [uri "/.env.local"] [unique_id "afE3xp9DNtio6-_aVaCPaAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 22:07:25
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 18:07:17.543608 2026] [security2:error] [pid 19012:tid 19012] [client 15.235.154.185:46562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.onlinelinks.net"] [uri "/.env.local"] [unique_id "afEvlT_NQxZifOdTA_QP7wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-28 20:44:40
(1 month ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 17:58:44
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 13:58:36.825859 2026] [security2:error] [pid 8688:tid 8688] [client 15.235.154.185:55910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.reneehill.net"] [uri "/.env"] [unique_id "afD1TOc9gr8LZoie_24ORwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 15:14:33
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 11:14:25.289176 2026] [security2:error] [pid 9955:tid 9955] [client 15.235.154.185:57160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lightbender.net"] [uri "/.env"] [unique_id "afDO0RLWNxJ9nPIJ468afgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 11:05:31
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 15.235.154.185 (vb185.d.thevoicesolutions.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 07:05:27.983091 2026] [security2:error] [pid 21042:tid 21042] [client 15.235.154.185:47160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jsw4.net"] [uri "/.env"] [unique_id "afCUd102Aau_Ntf6yT13GAAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack