🇳🇱
homeshowdomain.nl
2026-04-14 21:59:04
(5 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-13.
show less
Web App Attack
SSH
Hacking
🇸🇪
SkyDancer
2026-04-13 13:23:09
(5 months ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ...
show more
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-04-13 13:09:25
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 09:09:16.842160 2026] [security2:error] [pid 700959:tid 700959] [client 154.161.187.135:37831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ilanknapp.com"] [uri "/.env"] [unique_id "adzq_D0sfjvTJ8TjJ_bwZQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Devarajan Mathavan
2026-04-13 06:34:00
(5 months ago)
Web App Attack
IP that was blocked due to Illegal Resource Access
Bad Web Bot
SQL Injection
🇺🇸
nyt
2026-04-12 23:24:23
(5 months ago)
Sensitive File Probe
Web App Attack
🇺🇸
TPI-Abuse
2026-04-12 22:50:33
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 18:50:29.473326 2026] [security2:error] [pid 3142403:tid 3142403] [client 154.161.187.135:43124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idodat.com"] [uri "/.env"] [unique_id "adwhtX36lCNGDXvVgfYr9AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-12 21:50:18
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 17:50:12.563060 2026] [security2:error] [pid 1046269:tid 1046269] [client 154.161.187.135:45128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idmadventures.com"] [uri "/.env"] [unique_id "adwTlFCPVs6CcrH53ljAMwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-12 20:48:04
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 16:47:57.617656 2026] [security2:error] [pid 302862:tid 302862] [client 154.161.187.135:9477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idonthaveawebpage.com"] [uri "/.env"] [unique_id "adwE_Tqn_OVb1UQr4frO3QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-04-12 20:35:42
(5 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2026-04-12 20:26:18
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 16:26:12.956704 2026] [security2:error] [pid 2873141:tid 2873141] [client 154.161.187.135:33410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ianmagarzo.com"] [uri "/.env"] [unique_id "adv_5F5fhSTSW522arbTlAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-12 19:51:02
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 15:50:56.143174 2026] [security2:error] [pid 2945599:tid 2945599] [client 154.161.187.135:26022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idledog.com"] [uri "/.env"] [unique_id "adv3oCpQlXzCF3JvFxJUFwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-12 18:47:57
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 14:47:51.257467 2026] [security2:error] [pid 1354017:tid 1354017] [client 154.161.187.135:2188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icsubb.com"] [uri "/.env"] [unique_id "advo1yVdcrUQqFEOCtJ6XQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-12 18:20:08
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 14:20:02.519958 2026] [security2:error] [pid 1198655:tid 1198655] [client 154.161.187.135:35158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icwcruisersguide.com"] [uri "/.env"] [unique_id "adviUmB_Vi_d23OpLhCK1QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-12 17:40:01
(5 months ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-04-12 17:26:05
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.161.187.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 13:25:58.915936 2026] [security2:error] [pid 3206923:tid 3206947] [client 154.161.187.135:60003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idealcentralvac.com"] [uri "/.env"] [unique_id "advVpqwDO9ZlXppIYmzkowAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack