๐ณ๐ฑ
homeshowdomain.nl
2025-11-16 22:59:36
(10 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-15.
show less
Hacking
Web App Attack
SSH
๐บ๐ธ
TPI-Abuse
2025-11-16 11:16:55
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 35.181.58.100 (ec2-35-181-58-100.eu-west-3.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 35.181.58.100 (ec2-35-181-58-100.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 06:16:50.653211 2025] [security2:error] [pid 27114:tid 27114] [client 35.181.58.100:41224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kotelbarmitzvah.com"] [uri "/.env"] [unique_id "aRmyor6s6RQ9_ERJel0KNAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-16 07:15:53
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 35.181.58.100 (ec2-35-181-58-100.eu-west-3.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 35.181.58.100 (ec2-35-181-58-100.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 02:15:50.305931 2025] [security2:error] [pid 9742:tid 9742] [client 35.181.58.100:37170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krassa.org"] [uri "/.env"] [unique_id "aRl6Jib-H_w99tIR5N_9NgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-16 06:40:47
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 35.181.58.100 (ec2-35-181-58-100.eu-west-3.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 35.181.58.100 (ec2-35-181-58-100.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 01:40:43.154113 2025] [security2:error] [pid 32689:tid 32689] [client 35.181.58.100:54546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krakowski.net"] [uri "/.env.local"] [unique_id "aRlx68idG3N2Tp4tO-wePQAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-11-15 18:43:42
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2025-11-15 14:45:57
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 35.181.58.100 (ec2-35-181-58-100.eu-west-3.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 35.181.58.100 (ec2-35-181-58-100.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 09:45:50.818201 2025] [security2:error] [pid 7983:tid 7983] [client 35.181.58.100:39062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "letceteragifts.kathrynmcbride.com"] [uri "/.env.prod"] [unique_id "aRiSHkah2LKaRauh0NBSMQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-11-15 14:15:15
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_MODSEC
Brute-Force
SSH
๐ง๐ฌ
Filipe Dรกvila
2025-11-15 11:21:15
(10 months ago)
[Sat Nov 15 06:21:13.875388 2025] [:error] [pid 435501:tid 140666210313984] [client 35.181.58.100:37 ...
show more
[Sat Nov 15 06:21:13.875388 2025] [:error] [pid 435501:tid 140666210313984] [client 35.181.58.100:37036] [client 35.181.58.100] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "[redacted]"] [uri "/.git/config"] [unique_id "aRhiKSM3llxSgWR1ihpVBAAAAE8"]
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-15 03:38:56
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 35.181.58.100 (ec2-35-181-58-100.eu-west-3.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 35.181.58.100 (ec2-35-181-58-100.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 22:38:51.876304 2025] [security2:error] [pid 2524443:tid 2524552] [client 35.181.58.100:45558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newyorkplasticsurgery.us"] [uri "/.git/config"] [unique_id "aRf1y6olzizvGN366MTSdQAAAhI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mashamal
2025-11-14 20:18:00
(10 months ago)
Vulnerability Probe
...
Web App Attack