🇳🇱
e.fierstra
2026-07-24 09:50:48
(1 hour ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-07-24 09:44:04
(1 hour ago)
Bot / scanning and/or hacking attempts: [1/1] done, GET /.svn/wc.db HTTP/2.0, [0/0] init, GET /wp-co ...
show more
Bot / scanning and/or hacking attempts: [1/1] done, GET /.svn/wc.db HTTP/2.0, [0/0] init, GET /wp-config.php HTTP/2.0, GET /laravel/.env HTTP/2.0, GET /.svn/entries HTTP/2.0, GET /.git/COMMIT_EDITMSG HTTP/2.0, GET /.git/HEAD HTTP/2.0, GET /public/.env HTTP/2.0, GET /core/.env HTTP/2.0, GET /www/.env HTTP/2.0, GET /admin/.env HTTP/2.0, GET /.env.development.local HTTP/2.0, GET /.git/index HTTP/2.0, GET /.git/config HTTP/2.0, GET /.env.testing HTTP/2.0, GET /.git/logs/HEAD HTTP/2.0
show less
Hacking
Web App Attack
🇲🇾
Rizzy
2026-07-24 06:44:10
(4 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-07-24 02:02:46
(8 hours ago)
Excessive 404/403 errors
Brute-Force
2026-07-24 01:32:17
(9 hours ago)
T: f2b 404 5x
Web App Attack
🇳🇿
Antinson
2026-07-24 00:13:54
(10 hours ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-23 19:10:07
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 3.92.165.173 (ec2-3-92-165-173.compute-1.amazon ...
show more
(mod_security) mod_security (id:210492) triggered by 3.92.165.173 (ec2-3-92-165-173.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 15:09:59.427646 2026] [security2:error] [pid 17693:tid 17693] [client 3.92.165.173:52866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "missingfilm.com"] [uri "/.env"] [unique_id "amJnB_Xwf2bcVQWHTYLmowAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-23 11:35:02
(23 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 09:11:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 3.92.165.173 (ec2-3-92-165-173.compute-1.amazon ...
show more
(mod_security) mod_security (id:210492) triggered by 3.92.165.173 (ec2-3-92-165-173.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 05:11:46.698568 2026] [security2:error] [pid 2212719:tid 2212719] [client 3.92.165.173:51290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mctmtrade.com.easternimport.com"] [uri "/.env"] [unique_id "amHa0vvjSNzBIHpWtHhuCQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-07-23 04:20:47
(1 day ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-22 22:06:27
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-21.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-07-22 18:13:51
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 3.92.165.173 (ec2-3-92-165-173.compute-1.amazon ...
show more
(mod_security) mod_security (id:210492) triggered by 3.92.165.173 (ec2-3-92-165-173.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 14:13:46.546826 2026] [security2:error] [pid 1185959:tid 1185959] [client 3.92.165.173:46956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oakglenhouse.com"] [uri "/.env"] [unique_id "amEIWhK2s2x1M6IemnCEPwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-07-22 17:55:27
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 16:46:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 3.92.165.173 (ec2-3-92-165-173.compute-1.amazon ...
show more
(mod_security) mod_security (id:210492) triggered by 3.92.165.173 (ec2-3-92-165-173.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 12:46:43.703814 2026] [security2:error] [pid 15514:tid 15534] [client 3.92.165.173:33020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "losersoftheyear.ceol.us"] [uri "/.env"] [unique_id "amDz80Io4-SGxq3GLt9PggAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-07-22 13:19:54
(1 day ago)
20 attempts against mh_ha-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack