🇳🇱
homeshowdomain.nl
2026-06-08 22:00:32
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-07.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-08 10:15:24
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 06:15:17.088210 2026] [security2:error] [pid 25762:tid 25798] [client 178.93.201.138:32889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "honeyled.com"] [uri "/.env"] [unique_id "aiaWNVPLn3gibr5qiA1fiwAAAMQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-06-08 08:11:39
(1 week ago)
178.93.201.138 - - [08/Jun/2026:11:08:31 +0300] "GET /.env HTTP/1.1" 404 762 "-" "Mozilla/5.0 (Macin ...
show more
178.93.201.138 - - [08/Jun/2026:11:08:31 +0300] "GET /.env HTTP/1.1" 404 762 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
178.93.201.138 - - [08/Jun/2026:11:11:39 +0300] "GET /.env HTTP/1.1" 404 768 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 07:48:48
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:949110) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 03:48:43.776667 2026] [security2:error] [pid 12413:tid 12413] [client 178.93.201.138:35245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.experimentalscene.com"] [uri "/.env"] [unique_id "aiZz29VRz_zr_Zw0kiAsagAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 06:51:43
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 02:51:40.024052 2026] [security2:error] [pid 31962:tid 31962] [client 178.93.201.138:45323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.batesstrategygroup.com"] [uri "/.env"] [unique_id "aiZmfHn57ydqE2o4mTeetwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 03:31:06
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 23:31:03.246950 2026] [security2:error] [pid 25176:tid 25176] [client 178.93.201.138:57171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.animz.com"] [uri "/.env"] [unique_id "aiY3d9ECC11rupRwoiYCYAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 03:15:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 23:15:52.023725 2026] [security2:error] [pid 19878:tid 19878] [client 178.93.201.138:50007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nathsharmaandcompany.com"] [uri "/.env"] [unique_id "aiYz6BmzmJzJRvA3qtWyEwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 02:39:04
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 22:38:59.885328 2026] [security2:error] [pid 16234:tid 16234] [client 178.93.201.138:62463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.davidharrisgriffith.com"] [uri "/.env"] [unique_id "aiYrQ4OVOWDe2_YT0pZ4kAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 01:47:50
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 21:47:43.321196 2026] [security2:error] [pid 11579:tid 11579] [client 178.93.201.138:48299] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "monopolimusic.com"] [uri "/.env"] [unique_id "aiYfP7S_cTRdPWINkT94cQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
CBJ
2026-06-08 01:23:32
(1 week ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 00:22:43
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 20:22:39.959689 2026] [security2:error] [pid 10158:tid 10158] [client 178.93.201.138:30445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jhbookdesign.com"] [uri "/.env"] [unique_id "aiYLT1Vyb6FuKvcYEqpCawAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 23:48:00
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 19:47:56.450736 2026] [security2:error] [pid 24007:tid 24007] [client 178.93.201.138:40109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "astariamusic.com"] [uri "/.env"] [unique_id "aiYDLIHjylaH7peyOL_CPAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 23:21:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 19:21:14.246347 2026] [security2:error] [pid 16070:tid 16070] [client 178.93.201.138:40991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.manaplas.com"] [uri "/.env"] [unique_id "aiX86hypaZfh9GAEyR6yowAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 22:56:21
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 18:56:14.359495 2026] [security2:error] [pid 29527:tid 29527] [client 178.93.201.138:36059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrepoch.art"] [uri "/.env"] [unique_id "aiX3DmHCPs2RkY0y-bM8bAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 22:26:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 178.93.201.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 18:26:00.966617 2026] [security2:error] [pid 26089:tid 26089] [client 178.93.201.138:59263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stationrestaurant.ca"] [uri "/.env"] [unique_id "aiXv-Eqi0kb8pzN-HSH3TwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack