🇳🇱
homeshowdomain.nl
2026-09-19 22:00:38
(14 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-18.
show less
Web App Attack
SSH
Hacking
🇹🇷
eryilmaz
2026-09-18 02:00:16
(2 days ago)
Automated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. / ...
show more
Automated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. /config.json
show less
Web App Attack
Hacking
🇨🇱
ifiguero
2026-09-17 05:54:07
(3 days ago)
Web Attack (\x00\x00\x00\x00\x00). 7d ban
Web App Attack
2026-09-17 04:00:01
(3 days ago)
suspicious request in access.log
Web App Attack
2026-09-16 12:50:04
(3 days ago)
Web application attack detected.
Web App Attack
2026-09-13 06:31:33
(1 week ago)
178.128.81.201 - - [13/Sep/2026:08:31:32 +0200] "GET /. HTTP/2.0" 301 169 "-" "Mozilla/5.0 (Windows ...
show more
178.128.81.201 - - [13/Sep/2026:08:31:32 +0200] "GET /. HTTP/2.0" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
show less
Web App Attack
🇳🇱
Alt255
2026-09-12 01:11:12
(1 week ago)
178.128.81.201 - - [12/Sep/2026:03:11:12 +0200] "GET /nl/.env.local HTTP/1.1" 200 6047 "https://s-hi ...
show more
178.128.81.201 - - [12/Sep/2026:03:11:12 +0200] "GET /nl/.env.local HTTP/1.1" 200 6047 "https://s-hiny-wi-lliamfox.john8447.workers.dev/proxy?modify&proxyUrl=https%3A%2F%2Fimg-group.nl%2F.env.local" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-09-10 02:41:54
(1 week ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-09 19:42:32
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 178.128.81.201 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 178.128.81.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 15:42:26.858459 2026] [security2:error] [pid 27376:tid 27376] [client 178.128.81.201:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amazingthailand.net"] [uri "/.env"] [unique_id "aqG2olUBeiJ2BEaHvE3o_wAAAAo"], referer: https://www.google.com/search?q=amazingthailand.net
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-09 19:37:18
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
e.fierstra
2026-09-09 16:26:49
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 12:00:53
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 178.128.81.201 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 178.128.81.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 08:00:47.391170 2026] [security2:error] [pid 5213:tid 5213] [client 178.128.81.201:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thepenandquill.com"] [uri "/.env.production"] [unique_id "aqFKbzcjgCOOejzfG8PoDwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-09 00:40:20
(1 week ago)
178.128.81.201 - - [09/Sep/2026:00:40:19 +0000] "GET /bootstrap/cache/config.php HTTP/1.1" 404 7930 ...
show more
178.128.81.201 - - [09/Sep/2026:00:40:19 +0000] "GET /bootstrap/cache/config.php HTTP/1.1" 404 7930 "https://tight-math-b319.kdaun3bt.workers.dev/proxy?modify&proxyUrl=https%3A%2F%2Famo.rocks%2Fbootstrap%2Fcache%2Fconfig.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-08 22:01:27
(1 week ago)
Auto-ban: >3000 req/min op 2026-09-08
Web App Attack
SSH
Hacking
🇫🇷
conseilgouz
2026-09-08 20:34:02
(1 week ago)
ame-17 : Tentative accès à un répertoire caché=>/.env.backup(/)
Hacking