2026-06-16 05:17:55
(2 weeks ago)
<jail> banned by fail2ban
Brute-Force
Web App Attack
🇬🇧
andypiper
2026-06-16 01:02:52
(2 weeks ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-06-16 00:12:41
(2 weeks ago)
Abuse Detected (2)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-15 22:00:54
(2 weeks ago)
Auto-ban: >3000 req/min op 2026-06-15
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-15 16:41:27
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 181.215.182.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 181.215.182.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 12:41:21.865240 2026] [security2:error] [pid 19872:tid 19872] [client 181.215.182.234:58661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "300blockofwarwick.com"] [uri "/.env"] [unique_id "ajArMRjF2koKfUF5vU-EwgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-15 16:38:38
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 181.215.182.234 (US/United States/-)
SQL Injection
🇺🇸
agenciahypelab.com.br
2026-06-15 16:23:43
(2 weeks ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
2026-06-15 16:18:29
(2 weeks ago)
(caddyscan) Scanner path probe from 181.215.182.234 (US/United States/-): 5 in the last 3600 secs; P ...
show more
(caddyscan) Scanner path probe from 181.215.182.234 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 404 215 181.215.182.234 - - [15/Jun/2026:16:18:13 +0000] "GET /.env HTTP/1.1"
[REDACTED] 404 212 181.215.182.234 - - [15/Jun/2026:16:18:14 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 181.215.182.234 - - [15/Jun/2026:16:18:16 +0000] "GET /.env HTTP/1.1"
[REDACTED] 404 222 181.215.182.234 - - [15/Jun/2026:16:18:19 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 181.215.182.234 - - [15/Jun/2026:16:18:21 +0000] "GET /.env HTTP/1.1"
show less
Port Scan
2026-06-15 16:00:15
(2 weeks ago)
Scanning/Probing activity detected.
Bad Web Bot
Web App Attack
2026-06-15 15:17:02
(2 weeks ago)
181.215.182.234 - - [15/Jun/2026:17:17:02 +0200] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Maci ...
show more
181.215.182.234 - - [15/Jun/2026:17:17:02 +0200] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 14:46:36
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 181.215.182.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 181.215.182.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 10:46:30.923643 2026] [security2:error] [pid 31937:tid 31937] [client 181.215.182.234:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "betiqos.com"] [uri "/.env"] [unique_id "ajAQRvOUntz9ks9JKYKp1QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2026-06-15 14:43:32
(2 weeks ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇵🇱
sefinek.net
2026-06-15 14:24:29
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /.env | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
lindi
2026-06-15 13:26:45
(2 weeks ago)
trying to access .env file
...
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 12:31:05
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 181.215.182.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 181.215.182.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 08:31:00.161566 2026] [security2:error] [pid 15225:tid 15225] [client 181.215.182.234:16936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aykuatelier.com"] [uri "/.env"] [unique_id "ai_whLThgzM7DHbUphIJIgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack