๐ณ๐ฑ
homeshowdomain.nl
2026-08-24 21:59:52
(4 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-23.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-08-23 22:48:02
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 18:47:54.646901 2026] [security2:error] [pid 23752:tid 23752] [client 154.163.142.32:4113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knorg.com"] [uri "/.env"] [unique_id "aot4mkl-5zad4HkUKTAdDgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-08-23 22:00:37
(5 days ago)
Auto-ban: >3000 req/min op 2026-08-23
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-08-23 19:10:39
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 15:10:33.911331 2026] [security2:error] [pid 7597:tid 7597] [client 154.163.142.32:6431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kittyloveschai.com"] [uri "/.env"] [unique_id "aotFqd9p3EbH1RtGlrdSowAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-23 18:37:35
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 14:37:27.830069 2026] [security2:error] [pid 4033:tid 4033] [client 154.163.142.32:44456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kittysalterations.com"] [uri "/.env"] [unique_id "aos952Jp4iHcLSKq6GmHkwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-23 18:02:57
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 14:02:53.242008 2026] [security2:error] [pid 30242:tid 30242] [client 154.163.142.32:8296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kln.jp"] [uri "/.env"] [unique_id "aos1zSyMCiMJ_xTEmg21BAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
jcbriar
2026-08-23 18:01:45
(5 days ago)
Searching for vulnerable scripts
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-23 17:00:58
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 13:00:51.030285 2026] [security2:error] [pid 6733:tid 6733] [client 154.163.142.32:14882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knoxbestos.com"] [uri "/.env"] [unique_id "aosnQynivQMwac30Bg_oeQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-23 16:39:31
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 12:39:23.802450 2026] [security2:error] [pid 4650:tid 4650] [client 154.163.142.32:23053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kmp.net"] [uri "/.env"] [unique_id "aosiOzJCR738NzzxrI8kugAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-23 15:33:09
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 11:33:01.217649 2026] [security2:error] [pid 10747:tid 10747] [client 154.163.142.32:35025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knowledgepreservationalliance.com"] [uri "/.env"] [unique_id "aosSrfIsWGEI7Qm4t6ig7wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-23 09:10:10
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 05:10:03.531635 2026] [security2:error] [pid 10626:tid 10626] [client 154.163.142.32:24637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kistner.us"] [uri "/.env"] [unique_id "aoq46_L3pIh742ZCg8sq-QAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-23 07:57:43
(6 days ago)
[ns41.kdns.gr] httpd-config-scan: sites=www.kkourelis.gr; logs=/var/log/httpd/domains/kkourelis.gr.l ...
show more
[ns41.kdns.gr] httpd-config-scan: sites=www.kkourelis.gr; logs=/var/log/httpd/domains/kkourelis.gr.log; samples=/.env
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-23 07:47:22
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 03:47:14.878908 2026] [security2:error] [pid 30560:tid 30560] [client 154.163.142.32:8650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kneupper.com"] [uri "/.env"] [unique_id "aoqlgl6tl023N3wB1G38mAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-23 07:14:44
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 154.163.142.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 03:14:37.429551 2026] [security2:error] [pid 11890:tid 11890] [client 154.163.142.32:53814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knowbuddy.org"] [uri "/.env"] [unique_id "aoqd3dUcSTH9OpYJTk9ybgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-08-23 03:58:14
(6 days ago)
Login credentials theft attempt
Hacking