🇳🇱
homeshowdomain.nl
2025-10-23 21:59:03
(11 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-10-22.
show less
Hacking
Web App Attack
SSH
🇳🇱
homeshowdomain.nl
2025-10-22 21:59:29
(11 months ago)
Auto-ban: >3000 req/min op 2025-10-22
Hacking
Web App Attack
SSH
2025-10-22 16:36:17
(11 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇩🇪
©MB©
2025-10-22 13:30:09
(11 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Hacking
Web App Attack
🇩🇪
wsyq
2025-10-22 12:33:39
(11 months ago)
Fail2Ban - \[NGINX\]40x-Forcing to access a restricted resource
...
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2025-10-22 11:55:16
(11 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-10-22 11:54:09
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 18.117.171.0 (ec2-18-117-171-0.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 18.117.171.0 (ec2-18-117-171-0.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 22 07:54:01.927893 2025] [security2:error] [pid 21317:tid 21317] [client 18.117.171.0:47680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "monteriggioni.montepulciano.org"] [uri "/.env"] [unique_id "aPjF2dw_TBjJp13D509FaQAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-22 11:00:46
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 18.117.171.0 (ec2-18-117-171-0.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 18.117.171.0 (ec2-18-117-171-0.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 22 07:00:40.087759 2025] [security2:error] [pid 7393:tid 7421] [client 18.117.171.0:54516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mist.business.oplconnect.com"] [uri "/.env"] [unique_id "aPi5WPe1rezzY4-m00lJzgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2025-10-22 10:00:05
(11 months ago)
Brute-force attack to identify web exploits
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-10-22 09:57:44
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 18.117.171.0 (ec2-18-117-171-0.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 18.117.171.0 (ec2-18-117-171-0.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 22 05:57:38.782223 2025] [security2:error] [pid 24245:tid 24245] [client 18.117.171.0:42190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "members.oxfordgliding.com"] [uri "/.git/config"] [unique_id "aPiqkhNNZ_x0xLnQIKBiUwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2025-10-22 09:43:35
(11 months ago)
Malicious activity from IP detected: crowdsecurity/http-admin-interface-probing.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-10-22 08:38:34
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 18.117.171.0 (ec2-18-117-171-0.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 18.117.171.0 (ec2-18-117-171-0.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 22 04:38:26.935254 2025] [security2:error] [pid 2307:tid 2307] [client 18.117.171.0:47664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maria-virginia.com"] [uri "/.env"] [unique_id "aPiYAr109ziue-dHH3wq3wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
IloGus
2025-10-22 07:45:06
(11 months ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2025-10-22 07:40:45
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 18.117.171.0 (ec2-18-117-171-0.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 18.117.171.0 (ec2-18-117-171-0.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 22 03:40:36.881622 2025] [security2:error] [pid 29386:tid 29386] [client 18.117.171.0:49168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.rothmandesigns.com"] [uri "/.env"] [unique_id "aPiKdFayighLHBCcQi2mfQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇭
thaizone.com
2025-10-22 07:25:14
(11 months ago)
Hacking attempts against websites (D1) #1
Hacking
Web App Attack