2026-10-27 04:32:02
(22 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇳🇱
Alt255
2026-10-26 21:20:51
(1 day ago)
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 15 ...
show more
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 154.163.128.175 - - [24/Oct/2026:17:45:56 +0200] "GET /.env HTTP/1.1" 301 582 "-" "python-requests/2.32.5"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-25 23:01:07
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-24.
show less
Web App Attack
SSH
Hacking
🇺🇸
francelink.fr
2026-10-25 01:02:26
(3 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-24T21:48:58.000Z.
Web App Attack
2026-10-24 22:25:03
(3 days ago)
suspicious request in access.log
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-24 21:59:23
(3 days ago)
Auto-ban: >3000 req/min op 2026-10-24
Web App Attack
SSH
Hacking
🇺🇸
francelink.fr
2026-10-24 20:31:26
(3 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-24T19:48:25.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 19:42:31
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.128.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.128.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 15:42:26.206441 2026] [security2:error] [pid 17685:tid 17685] [client 154.163.128.175:9147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lertap5.com"] [uri "/.env"] [unique_id "at0KIrFCi4WrgfLJkG-ZEQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-24 18:48:00
(3 days ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-24 18:30:55
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.128.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.128.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 14:30:50.458721 2026] [security2:error] [pid 28389:tid 28389] [client 154.163.128.175:29126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leirstein.com"] [uri "/.env"] [unique_id "atz5WpK8xWora3D7BGG3VgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 17:00:10
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.128.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.128.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 13:00:04.164299 2026] [security2:error] [pid 24515:tid 24515] [client 154.163.128.175:43269] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leewis.com"] [uri "/.env"] [unique_id "atzkFNK60_GfKMEWFJM0sAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 16:32:36
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.128.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.128.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 12:32:29.222920 2026] [security2:error] [pid 15819:tid 15819] [client 154.163.128.175:38742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lemobba.com"] [uri "/.env"] [unique_id "atzdnYwGzmTzsK_TJkngFgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-10-24 16:28:55
(3 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 16:14:04
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.128.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.128.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 12:13:57.126718 2026] [security2:error] [pid 22263:tid 22263] [client 154.163.128.175:64102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "legendesignhouse.com"] [uri "/.env"] [unique_id "atzZRX4PWo61xkK5HwZN4QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 15:53:20
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.128.175 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.128.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:53:13.484790 2026] [security2:error] [pid 11329:tid 11329] [client 154.163.128.175:21037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "legalnexusbali.com"] [uri "/.env"] [unique_id "atzUaVR_4t9CjO2hPXQV9wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
