🇺🇸
TPI-Abuse
2026-03-03 06:16:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 152.42.226.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 152.42.226.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 01:16:36.961042 2026] [security2:error] [pid 7013:tid 7013] [client 152.42.226.8:59348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.217"] [uri "/.env"] [unique_id "aaZ8xFqtpXwMLxUvpO2VGQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-03-02 12:17:48
(6 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-03-01 16:06:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 152.42.226.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 152.42.226.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 11:06:24.451552 2026] [security2:error] [pid 32030:tid 32030] [client 152.42.226.8:37588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dandemonium.net"] [uri "/.env"] [unique_id "aaRkALLNCvX1tFhEn-oyTwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-01 14:58:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 152.42.226.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 152.42.226.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 09:58:07.090245 2026] [security2:error] [pid 2073:tid 2073] [client 152.42.226.8:53288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deargrampy.net"] [uri "/.env"] [unique_id "aaRT_0d7PQeTgNW6EjL9UAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-01 08:55:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 152.42.226.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 152.42.226.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 03:55:35.762625 2026] [security2:error] [pid 1981:tid 1981] [client 152.42.226.8:35560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eb3d.net"] [uri "/.env"] [unique_id "aaP_B1jLHjKEOcTuBSn6_AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-02-28 18:28:50
(6 months ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
sc user
2026-02-24 07:02:15
(7 months ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show more
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
🇬🇧
consul.to
2026-02-24 05:11:08
(7 months ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
consul.to
2026-02-21 18:24:46
(7 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
gu-alvareza
2026-02-15 07:05:09
(7 months ago)
AndroxGh0st.Malware
Hacking
Exploited Host
🇩🇪
Dennis
2026-02-15 03:34:04
(7 months ago)
152.42.226.8 has been banned for triggering http-sensitive-files (5 events over 2.245220935s).
Brute-Force
Web App Attack
🇬🇧
spamverify.com
2026-02-15 01:20:38
(7 months ago)
Honeypot Hit: Port Scan (80) HTTP
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-02-14 01:37:40
(7 months ago)
High error rate and elevated request volume targeting cPanel servers
Bad Web Bot
🇺🇸
gu-alvareza
2026-02-12 07:05:19
(7 months ago)
AndroxGh0st.Malware
Hacking
Exploited Host
🇳🇿
Antinson
2026-02-12 05:28:38
(7 months ago)
High error rate and elevated request volume targeting cPanel servers
Bad Web Bot