🇫🇷
mail.avx.gr
2026-07-23 11:31:08
(1 hour ago)
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 209.87.164.252 - - [18/Jul/2026:14:55:26 +0300] " ...
show more
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 209.87.164.252 - - [18/Jul/2026:14:55:26 +0300] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Web App Attack
2026-07-20 16:32:21
(2 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇩🇪
conseilgouz
2026-07-18 17:22:42
(4 days ago)
gie-17 : Block hidden directories=>/.env(/)
Hacking
2026-07-18 16:38:15
(4 days ago)
Automatically blocked after 1 security event. Observed sensitive configuration-file probes. Source: ...
show more
Automatically blocked after 1 security event. Observed sensitive configuration-file probes. Source: Cloudflare security controls.
show less
Hacking
Web App Attack
2026-07-18 16:05:34
(4 days ago)
Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=4
Hacking
🇺🇸
TPI-Abuse
2026-07-18 15:07:53
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 209.87.164.252 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.87.164.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 11:07:47.180887 2026] [security2:error] [pid 2206514:tid 2206514] [client 209.87.164.252:60993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casaluzislamujeres.com"] [uri "/.env"] [unique_id "aluWw3vpRAnzTKzW-1ioRAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ArturShelby
2026-07-18 15:04:01
(4 days ago)
Critical file access: /.env
Web App Attack
🇩🇪
Ba-Yu
2026-07-18 12:09:34
(5 days ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇩🇪
ger-stg-sifi1
2026-07-18 12:08:34
(5 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
nationaleventpros.com
2026-07-18 12:04:14
(5 days ago)
vulnerability scan
Web App Attack
🇩🇪
Nevermind
2026-07-18 12:02:15
(5 days ago)
209.87.164.252 - - [18/Jul/2026:14:02:10 +0200] "GET /.env HTTP/1.1" 403 4787 "-" "Mozilla/5.0 (Maci ...
show more
209.87.164.252 - - [18/Jul/2026:14:02:10 +0200] "GET /.env HTTP/1.1" 403 4787 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.164.252 - - [18/Jul/2026:14:02:12 +0200] "GET /.env HTTP/1.1" 404 468 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.164.252 - - [18/Jul/2026:14:02:13 +0200] "GET /.env HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
209.87.164.252 - - [18/Jul/2026:14:02:14 +0200] "GET /.env HTTP/1.1" 403 6273 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
Web App Attack
🇫🇷
mail.avx.gr
2026-07-18 11:55:26
(5 days ago)
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 209.87.164.252 - - [18/Jul/2026:14:55:26 +0300] " ...
show more
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 209.87.164.252 - - [18/Jul/2026:14:55:26 +0300] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Web App Attack
🇺🇸
interbiznw.com
2026-07-18 11:54:12
(5 days ago)
fail2ban-ban
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 10:25:55
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 209.87.164.252 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.87.164.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 06:25:48.363833 2026] [security2:error] [pid 20439:tid 20439] [client 209.87.164.252:47969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackriverarc.org"] [uri "/.env"] [unique_id "altUrIei8b2gZ5q9EqB_MAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
apislytics
2026-07-18 10:20:55
(5 days ago)
Automatic hard ban after repeated rate-limit abuse
Brute-Force