🇳🇱
homeshowdomain.nl
2026-06-07 22:01:52
(2 weeks ago)
Auto-ban: 542 malicious requests on 2026-06-06 (e.g., env/backup probes, brute-force, or error burst ...
show more
Auto-ban: 542 malicious requests on 2026-06-06 (e.g., env/backup probes, brute-force, or error bursts).
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2025-12-02 07:49:01
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 18.175.227.126 (ec2-18-175-227-126.eu-west-2.co ...
show more
(mod_security) mod_security (id:210492) triggered by 18.175.227.126 (ec2-18-175-227-126.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:48:55.920724 2025] [security2:error] [pid 27192:tid 27192] [client 18.175.227.126:41098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cms.saltybluemexico.com"] [uri "/.git/config"] [unique_id "aS6Z5ysI90kxTcw3U84UrgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
kundukundu
2025-12-02 07:21:48
(6 months ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /info1.php
Web App Attack
🇨🇿
huginet
2025-12-02 06:59:00
(6 months ago)
18.175.227.126 - - [02/Dec/2025:07:58:59 +0100] "GET /phpinfo.php HTTP/1.1" 404 16 "-" "python-httpx ...
show more
18.175.227.126 - - [02/Dec/2025:07:58:59 +0100] "GET /phpinfo.php HTTP/1.1" 404 16 "-" "python-httpx/0.28.1"
18.175.227.126 - - [02/Dec/2025:07:59:00 +0100] "GET /php_info.php HTTP/1.1" 404 16 "-" "python-httpx/0.28.1"
...
show less
Web Spam
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2025-12-01 22:01:34
(6 months ago)
[Mon Dec 01 15:01:32.161134 2025] [authz_core:error] [pid 43426:tid 140398311761472] [client 18.175. ...
show more
[Mon Dec 01 15:01:32.161134 2025] [authz_core:error] [pid 43426:tid 140398311761472] [client 18.175.227.126:45742] AH01630: client denied by server configuration: /var/www/horde/.env.bak
[Mon Dec 01 15:01:32.887773 2025] [authz_core:error] [pid 43426:tid 140396600469056] [client 18.175.227.126:45742] AH01630: client denied by server configuration: /var/www/horde/lib/.env
[Mon Dec 01 15:01:33.778775 2025] [authz_core:error] [pid 43426:tid 140396541720128] [client 18.175.227.126:45742] AH01630: client denied by server configuration: /var/www/horde/config/.env
...
show less
Bad Web Bot
🇮🇹
VHosting
2025-12-01 21:58:17
(6 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
2025-12-01 21:48:21
(6 months ago)
Multiple web server 400 error codes from same source ip
Web App Attack
2025-12-01 10:59:41
(6 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-12-01 10:38:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 18.175.227.126 (ec2-18-175-227-126.eu-west-2.co ...
show more
(mod_security) mod_security (id:210492) triggered by 18.175.227.126 (ec2-18-175-227-126.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 05:38:00.742552 2025] [security2:error] [pid 24002:tid 24002] [client 18.175.227.126:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.virtualizecr.net"] [uri "/.git/config"] [unique_id "aS1wCLPaGV66YI8w2rNwbwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack