๐ณ๐ฑ
homeshowdomain.nl
2026-08-03 21:59:19
(2 months ago)
Auto-ban: >3000 req/min op 2026-08-03
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-08-03 09:32:21
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 212.32.69.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.32.69.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 05:32:13.712714 2026] [security2:error] [pid 3012791:tid 3012791] [client 212.32.69.142:43471] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arsenalcreativo.com"] [uri "/.env"] [unique_id "anBgHbYnTxI3a7rDVi9FmQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
omc
2026-08-03 08:11:38
(2 months ago)
AH01630: Client denied by server config
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-08-03 06:26:30
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 212.32.69.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.32.69.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 02:26:26.832437 2026] [security2:error] [pid 969192:tid 969192] [client 212.32.69.142:26923] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oligofoundry.com"] [uri "/.env"] [unique_id "anA0klwTCtAKeH4SJMc5XgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-03 05:37:11
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 212.32.69.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.32.69.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 01:37:03.954203 2026] [security2:error] [pid 3526490:tid 3526500] [client 212.32.69.142:30839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moogoob.com"] [uri "/.env"] [unique_id "anAo_ytYH_r_5q1UJzc-AQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-03 05:25:45
(2 months ago)
http scanning for .env files
...
Hacking
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-08-03 05:06:02
(2 months ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-03 05:01:25
(2 months ago)
212.32.69.142 - - [02/Aug/2026:19:01:34 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Window ...
show more
212.32.69.142 - - [02/Aug/2026:19:01:34 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 212.32.69.142
212.32.69.142 - - [02/Aug/2026:19:34:55 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 212.32.69.142
212.32.69.142 - - [02/Aug/2026:20:40:18 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 212.32.69.142
212.32.69.142 - - [02/Aug/2026:21:38:41 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 212.32.69.142
212.32.69.142 - - [02/Aug/2026:22:01:42 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-03 04:49:19
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 212.32.69.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.32.69.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 00:49:14.608485 2026] [security2:error] [pid 181299:tid 181299] [client 212.32.69.142:57945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deargrampy.net"] [uri "/.env"] [unique_id "anAdylU9HzRgq0THy7OzSQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-03 04:16:40
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 212.32.69.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.32.69.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 00:16:35.185246 2026] [security2:error] [pid 3043902:tid 3043902] [client 212.32.69.142:60871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "azpinklimos.com"] [uri "/.env"] [unique_id "anAWI0wlqxMaSWkI7yZ54wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-08-03 04:08:02
(2 months ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice02,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
TheDjRider
2026-08-03 03:32:26
(2 months ago)
CrowdSec detected Web application attack. Scenario: local/framework-recon. Automatic ban triggered.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-03 03:23:31
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 212.32.69.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.32.69.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 23:23:27.717383 2026] [security2:error] [pid 1793734:tid 1793734] [client 212.32.69.142:53103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "feathersolar.com"] [uri "/.env"] [unique_id "anAJrz2hOYkLqhxcyrpoOgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-08-03 02:34:50
(2 months ago)
2.400 requests with url.path *.env
Brute-Force
Bad Web Bot
Anonymous
2026-08-03 02:08:50
(2 months ago)
[ssd5.kdns.gr] httpd-config-scan: sites=www.goingkoi.com.cy; logs=/var/log/httpd/domains/goingkoi.co ...
show more
[ssd5.kdns.gr] httpd-config-scan: sites=www.goingkoi.com.cy; logs=/var/log/httpd/domains/goingkoi.com.cy.log; samples=/.env
show less
Hacking
Web App Attack