๐ณ๐ฑ
homeshowdomain.nl
2025-09-15 21:59:35
(11 months ago)
Auto-ban: >500 bad req/min on 2025-09-14
Hacking
Web App Attack
SSH
๐ณ๐ฑ
taivas.nl
2025-09-14 21:00:06
(11 months ago)
web_app_attack
Email Spam
๐บ๐ธ
TPI-Abuse
2025-09-14 14:16:24
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.co ...
show more
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 10:16:17.094229 2025] [security2:error] [pid 3949105:tid 3949145] [client 15.237.178.209:35588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "store.emehache.com"] [uri "/.env"] [unique_id "aMbOMR-YfQM1EWpJVmXY3gAAAYc"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐พ
Rizzy
2025-09-14 13:17:10
(11 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2025-09-14 09:41:10
(11 months ago)
Multiple web server 400 error codes from same source ip
Web App Attack
๐ง๐ช
cmbplf
2025-09-14 09:35:05
(11 months ago)
3.991 requests with url.path *.env
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2025-09-14 09:10:18
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.co ...
show more
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 05:10:11.333409 2025] [security2:error] [pid 2013:tid 2013] [client 15.237.178.209:51904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menu.pizzadata.com"] [uri "/.env"] [unique_id "aMaGc10nP5_7DSKksXe70AAAAAk"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-09-14 08:48:46
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.co ...
show more
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 04:48:39.031524 2025] [security2:error] [pid 10997:tid 10997] [client 15.237.178.209:33010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mentalmolecule.com"] [uri "/.env"] [unique_id "aMaBZ0uBwfmzzgiW8p-OzQAAAAI"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-09-14 08:29:53
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.co ...
show more
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 04:29:46.040874 2025] [security2:error] [pid 1979422:tid 1979466] [client 15.237.178.209:41846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mensaxes.net"] [uri "/.env"] [unique_id "aMZ8-twU8wHQmCB47zTZCQAAAMw"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-09-14 08:00:55
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.co ...
show more
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 04:00:48.199903 2025] [security2:error] [pid 23545:tid 23545] [client 15.237.178.209:50054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menofstmatts.thelowensteinfamily.com"] [uri "/.env"] [unique_id "aMZ2MHl00VRbTmCO6fidaAAAAAw"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-09-14 06:41:02
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.co ...
show more
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 02:40:55.654781 2025] [security2:error] [pid 13783:tid 13783] [client 15.237.178.209:42760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mena365.gulftelecom.com"] [uri "/.env"] [unique_id "aMZjd1n5Oz4N5jTArD4-MAAAAAI"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-09-14 05:41:23
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.co ...
show more
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 01:41:16.923064 2025] [security2:error] [pid 19786:tid 19786] [client 15.237.178.209:42634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "memphislimousines.com"] [uri "/.env"] [unique_id "aMZVfJmJGAG8SVnG1iOcMwAAAAo"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-09-14 05:17:57
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.co ...
show more
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (ec2-15-237-178-209.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 01:17:52.796298 2025] [security2:error] [pid 26390:tid 26390] [client 15.237.178.209:56522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "memoriesmusic.net.controvac.com"] [uri "/.env"] [unique_id "aMZQADeCyxnYkQZwOIi8igAAAAE"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
zorrigas
2025-09-14 03:59:11
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (FR/France/ec2-15-237-178-209.eu ...
show more
(mod_security) mod_security (id:210492) triggered by 15.237.178.209 (FR/France/ec2-15-237-178-209.eu-west-3.compute.amazonaws.com): 5 in the last 3600 secs
show less
Brute-Force
Anonymous
2025-09-14 00:04:42
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH