🇳🇱
homeshowdomain.nl
2026-07-17 22:01:12
(1 week ago)
Auto-ban: >3000 req/min op 2026-07-17
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-07-17 17:07:53
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 13:07:49.336695 2026] [security2:error] [pid 578:tid 578] [client 171.111.192.107:38785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "inmosantanora.com"] [uri "/.env.production.local"] [unique_id "alphZWcI2zC595T_nu6Y7gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 16:27:09
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 12:27:01.217964 2026] [security2:error] [pid 4095:tid 4095] [client 171.111.192.107:40328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.capestfrancistransfers.jbaycabs.com"] [uri "/.env"] [unique_id "alpX1ZjydIJsmuXiBc_-bAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
XICTRON
2026-07-17 15:20:11
(1 week ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 13:53:54
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 09:53:50.079102 2026] [security2:error] [pid 1328355:tid 1328355] [client 171.111.192.107:51723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lauralane.club.cienmalos.com"] [uri "/.env.dev"] [unique_id "aloz7pqJZ93vH0wQydQgcwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-07-17 11:28:28
(1 week ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇫🇷
dynamix
2026-07-17 10:34:30
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 08:59:07
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 04:59:00.346660 2026] [security2:error] [pid 8803:tid 8803] [client 171.111.192.107:54888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stacyfarm.com"] [uri "/.env.production"] [unique_id "alnu1Ga7GRtuxO0SvV8o-QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 08:18:38
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 04:18:35.183313 2026] [security2:error] [pid 432143:tid 432143] [client 171.111.192.107:60307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kaplankrew.com"] [uri "/.env.dev"] [unique_id "alnlWzKhFYrFxceVyb8mGwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
djboddington
2026-07-17 07:07:09
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇩🇪
ger-stg-sifi1
2026-07-17 06:38:47
(1 week ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 06:07:28
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 02:07:23.404776 2026] [security2:error] [pid 27517:tid 27517] [client 171.111.192.107:53705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flugstad.com"] [uri "/.env"] [unique_id "alnGm_XyKwUMi5CDpOGW1AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-17 05:39:58
(1 week ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 03:52:36
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:52:33.277494 2026] [security2:error] [pid 224747:tid 224747] [client 171.111.192.107:57956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oshawinfree.robtown.com"] [uri "/.env.production"] [unique_id "almnAeIb06DRMvYzERzHqAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 03:10:22
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 171.111.192.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:10:14.430517 2026] [security2:error] [pid 146207:tid 146207] [client 171.111.192.107:47490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.washburn-books.easyweb-publishing.com"] [uri "/backend/.env"] [unique_id "almdFj-RX7Fdm9je95_ZwQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack