🇮🇩
David Koswari
2026-08-28 05:04:00
(14 hours ago)
REQ_BLOCKED_ACL
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇬🇧
thetomtaylor.co.uk
2026-08-27 12:08:02
(1 day ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
2026-08-27 11:50:05
(1 day ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 11:11:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 212.102.61.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 212.102.61.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 07:11:33.091357 2026] [security2:error] [pid 2565:tid 2565] [client 212.102.61.153:33482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drgracetomastolentino.com"] [uri "/.env"] [unique_id "apAbZQV5Q-Ga2D3NWksf-gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 09:48:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 212.102.61.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 212.102.61.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 05:48:47.093153 2026] [security2:error] [pid 27061:tid 27061] [client 212.102.61.153:52094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mosinn.is"] [uri "/.env"] [unique_id "apAH_4tlCRzsgMxNrRei5QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-27 09:46:35
(1 day ago)
Scanner hitting /.env on gitlab.osef.cloud (CDN77_Miami) — aaguard
Brute-Force
Port Scan
🇫🇷
Catalin Negru
2026-08-27 09:05:56
(1 day ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇫🇷
service Informatique
2026-08-27 04:00:37
(1 day ago)
GET /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 23:30:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 212.102.61.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 212.102.61.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 19:30:52.185986 2026] [security2:error] [pid 18468:tid 18468] [client 212.102.61.153:40354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.capitalcitysoul.com.calvaryshreveport.org"] [uri "/.env"] [unique_id "ao93LCmgec369spDbdxkggAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
Abuse Buster
2026-08-26 23:13:00
(1 day ago)
212.102.61.153 - - [27/Aug/2026:01:12:58 +0200] "GET /.env HTTP/1.1" 444 0 "-" "python-requests/2.34 ...
show more
212.102.61.153 - - [27/Aug/2026:01:12:58 +0200] "GET /.env HTTP/1.1" 444 0 "-" "python-requests/2.34.2"
212.102.61.153 - - [27/Aug/2026:01:12:58 +0200] "GET /.env HTTP/1.1" 444 0 "-" "python-requests/2.34.2"
...
show less
Web App Attack
🇺🇸
aks4226
2026-08-26 23:07:31
(1 day ago)
Bot search, attacking common web applications.
Web App Attack
🇳🇱
OrangeFlamingo
2026-08-26 23:06:02
(1 day ago)
2026-08-26 23:06:01 WARN Probe detected: uri=/api/.env ip=212.102.61.153
...
Web App Attack
🇺🇸
Lee Daniel
2026-08-26 23:02:44
(1 day ago)
212.102.61.153 - - [26/Aug/2026:19:02:43 -0400] "GET /.env HTTP/1.1" 403 6318 "-" "python-requests/2 ...
show more
212.102.61.153 - - [26/Aug/2026:19:02:43 -0400] "GET /.env HTTP/1.1" 403 6318 "-" "python-requests/2.34.2"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 22:29:20
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 212.102.61.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 212.102.61.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 18:29:12.836552 2026] [security2:error] [pid 19891:tid 19891] [client 212.102.61.153:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nyemdr-online.com"] [uri "/.env"] [unique_id "ao9ouH-S40y3AF2HKXIUFgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 21:48:24
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 212.102.61.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 212.102.61.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 17:48:16.492622 2026] [security2:error] [pid 4221:tid 4221] [client 212.102.61.153:46520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cancersquared.com"] [uri "/.env"] [unique_id "ao9fIA8NPN2EnMNvn_BshwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack