๐ณ๐ฑ
homeshowdomain.nl
2026-06-08 21:59:15
(2 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-07.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-08 08:06:45
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 04:06:40.233543 2026] [security2:error] [pid 25842:tid 25842] [client 2a02:4780:3:1141:0:31fa:5e13:1:53038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krassa.org"] [uri "/app/.env"] [unique_id "aiZ4EOWYovCBRTO_x_rqowAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
nzhost.co.nz
2026-06-08 06:34:54
(2 weeks ago)
$f2bV_matches
Hacking
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-06-08 06:26:34
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 02:26:29.139577 2026] [security2:error] [pid 20864:tid 20864] [client 2a02:4780:3:1141:0:31fa:5e13:1:20328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "36quant.com"] [uri "/app/.env"] [unique_id "aiZglbQA6xGjrCZGGJNkFgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 05:46:23
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 01:46:18.133502 2026] [security2:error] [pid 28458:tid 28458] [client 2a02:4780:3:1141:0:31fa:5e13:1:51432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelholdawayvideos.info"] [uri "/.env.save"] [unique_id "aiZXKk7OYVBodtBzMCAv8QAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
itsolon
2026-06-08 04:53:38
(3 weeks ago)
[08/Jun/2026:06:53:37 +0200] 178089441780.634494 2a02:4780:3:1141:0:31fa:5e13:1 0 217.154.7.177 443
...
show more
[08/Jun/2026:06:53:37 +0200] 178089441780.634494 2a02:4780:3:1141:0:31fa:5e13:1 0 217.154.7.177 443
[08/Jun/2026:06:53:37 +0200] 17808944171.646626 2a02:4780:3:1141:0:31fa:5e13:1 0 217.154.7.177 443
[08/Jun/2026:06:53:37 +0200] 178089441748.557420 2a02:4780:3:1141:0:31fa:5e13:1 0 217.154.7.177 443
[08/Jun/2026:06:53:37 +0200] 178089441726.153677 2a02:4780:3:1141:0:31fa:5e13:1 0 217.154.7.177 443
[08/Jun/2026:06:53:37 +0200] 178089441799.019609 2a02:4780:3:1141:0:31fa:5e13:1 0 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
MarkGGN
2026-06-08 04:06:47
(3 weeks ago)
Web attack. 2a02:4780:3:1141:0:31fa:5e13:1 - - [08/Jun/2026:06:06:46 +0200] "GET /.env HTTP/1.1" 403 ...
show more
Web attack. 2a02:4780:3:1141:0:31fa:5e13:1 - - [08/Jun/2026:06:06:46 +0200] "GET /.env HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
2a02:4780:3:1141:0:31fa:5e13:1 - - [08/Jun/2026:06:06:46 +0200] "GET /admin/.env HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
show less
Web App Attack
๐ณ๐ฑ
sernate
2026-06-08 04:00:47
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 10 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-06-08 02:58:48
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 22:58:45.105767 2026] [security2:error] [pid 10872:tid 10872] [client 2a02:4780:3:1141:0:31fa:5e13:1:34124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marykaydesign.net"] [uri "/members/.env"] [unique_id "aiYv5fokwest5W8vkbtvtAAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 01:47:43
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 21:47:39.638891 2026] [security2:error] [pid 16198:tid 16198] [client 2a02:4780:3:1141:0:31fa:5e13:1:39662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thainotarycalifornia.com"] [uri "/api/.env.save"] [unique_id "aiYfO3LUv7yaFiIp_vv8qwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 01:31:39
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 21:31:34.784199 2026] [security2:error] [pid 32384:tid 32384] [client 2a02:4780:3:1141:0:31fa:5e13:1:17170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "k2servicesinc.net"] [uri "/dev/.env"] [unique_id "aiYbduKugJt2nRLXLqv4FgAAAE4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 00:02:55
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 20:02:50.783063 2026] [security2:error] [pid 7733:tid 7733] [client 2a02:4780:3:1141:0:31fa:5e13:1:65046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acsellsre.com"] [uri "/api/.env.save"] [unique_id "aiYGqmwXz2B35F2uNiQqBQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 23:27:39
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 19:27:35.090659 2026] [security2:error] [pid 26369:tid 26369] [client 2a02:4780:3:1141:0:31fa:5e13:1:50808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crazypencil.com"] [uri "/members/.env"] [unique_id "aiX-ZyGzDLNVBOHTicn1mAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 22:58:00
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 18:57:54.508284 2026] [security2:error] [pid 3953:tid 3953] [client 2a02:4780:3:1141:0:31fa:5e13:1:54824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jfordclanrecipes.com"] [uri "/members/.env"] [unique_id "aiX3cgLDsKpcF6dEcvImEAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 22:21:59
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1141:0:31fa:5e13:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 18:21:55.862180 2026] [security2:error] [pid 17032:tid 17032] [client 2a02:4780:3:1141:0:31fa:5e13:1:47196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trlservice.com"] [uri "/.env"] [unique_id "aiXvA6mLtbitsJjqC-5MawAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack