2026-04-12 03:03:22
(2 months ago)
DNS AXFR Attempt
DNS Compromise
🇹🇷
rtbh.com.tr
2026-02-23 20:11:43
(3 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇬🇧
openstrike.co.uk
2026-02-23 06:13:36
(3 months ago)
5 attacks on site downloads (type 2), VC URLs, env grabbing URLs, PHP URLs, Laravel URLs:
GET /demo ...
show more
5 attacks on site downloads (type 2), VC URLs, env grabbing URLs, PHP URLs, Laravel URLs:
GET /demo HTTP/1.1
GET /.git/config HTTP/1.1
GET /.env HTTP/1.1
POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
GET /_ignition/execute-solution HTTP/1.1
show less
Hacking
Web App Attack
🇹🇷
rtbh.com.tr
2026-02-23 00:11:44
(3 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇳🇱
homeshowdomain.nl
2026-02-22 22:59:35
(3 months ago)
Auto-ban: >3000 req/min op 2026-02-22
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-02-22 07:27:48
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 209.38.26.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.38.26.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 02:27:45.811871 2026] [security2:error] [pid 31590:tid 31590] [client 209.38.26.29:59854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "briancastle.com"] [uri "/.env"] [unique_id "aZqv8TwCAaTLduXMU2QU8wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2026-02-22 07:02:15
(3 months ago)
Bad_requests
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-22 06:19:54
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 209.38.26.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.38.26.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 01:19:50.966040 2026] [security2:error] [pid 19566:tid 19566] [client 209.38.26.29:41544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brent23.com"] [uri "/.env"] [unique_id "aZqgBnXZ7E2XSVlMgIV2YwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
COMAITE
2026-02-22 06:18:16
(3 months ago)
Common web attack from 209.38.26.29.
Web App Attack
🇫🇷
dynamix
2026-02-22 05:49:43
(3 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-02-22 05:36:41
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 209.38.26.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.38.26.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 00:36:34.106598 2026] [security2:error] [pid 7247:tid 7247] [client 209.38.26.29:40844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "breezentry.com"] [uri "/.env"] [unique_id "aZqV4soFznpKleKgp_AWuAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-22 05:05:41
(3 months ago)
Blocked: Reason='Suspicious traffic score=80 (review-based detection)'; Requests=17
Hacking
🇬🇧
consul.to
2026-02-22 05:05:32
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-02-22 04:59:38
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 209.38.26.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.38.26.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 23:59:33.455414 2026] [security2:error] [pid 16924:tid 16949] [client 209.38.26.29:42474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "breast-augmentation-texas.com.aafm.us"] [uri "/.env"] [unique_id "aZqNNamjidZVy0aFodGs9QAAARc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-22 04:31:25
(3 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host