🇳🇱
homeshowdomain.nl
2026-07-18 22:02:34
(4 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-17.
show less
Web App Attack
SSH
Hacking
🇳🇱
Site.eu
2026-07-18 16:30:05
(4 days ago)
Excessive multi-domain requests
Brute-Force
🇮🇳
evicky2002
2026-07-18 06:00:00
(5 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇧🇪
taivas.nl
2026-07-18 04:32:26
(5 days ago)
Many_bad_calls
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-17 21:59:20
(5 days ago)
Auto-ban: >3000 req/min op 2026-07-17
Web App Attack
SSH
Hacking
🇯🇵
GuangChen233
2026-07-17 12:20:41
(5 days ago)
Blocked by CrowdSec: Ip 37.123.193.82 performed 'crowdsecurity/http-sensitive-files' (5 events over ...
show more
Blocked by CrowdSec: Ip 37.123.193.82 performed 'crowdsecurity/http-sensitive-files' (5 events over 1.227108663s) at 2026-07-17 12:20:40.13946252 0000 UTC
show less
Hacking
Web App Attack
🇳🇱
debestelapp
2026-07-17 11:50:06
(6 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 11:48:29
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 37.123.193.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 37.123.193.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 07:48:20.829738 2026] [security2:error] [pid 3821:tid 3821] [client 37.123.193.82:51679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grayhost.net"] [uri "/.env.example"] [unique_id "aloWhKxAo98xwuQ8Dk6WLAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 11:19:22
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 37.123.193.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 37.123.193.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 07:19:18.291367 2026] [security2:error] [pid 24088:tid 24088] [client 37.123.193.82:48089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teamgravity.ca.kanata.ws"] [uri "/.env"] [unique_id "aloPtiExvQOBDDCqJ60eHwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
pixiekat
2026-07-17 11:17:05
(6 days ago)
[Fri Jul 17 12:17:03.917417 2026] [security2:error] [pid 1354942:tid 1354998] [client 37.123.193.82: ...
show more
[Fri Jul 17 12:17:03.917417 2026] [security2:error] [pid 1354942:tid 1354998] [client 37.123.193.82:58263] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.28.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.spacecadetgrrl.me"] [uri "/tmp/.env"] [unique_id "aloPL6HbrTxgfN78dbmx9AAAAEE"]
[Fri Jul 17 12:17:04.622806 2026] [security2:error] [pid 1354942:tid 1355003] [client 37.123.193.82:58263] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.28.0"] [tag "anomaly-evalua
...
show less
Web App Attack
🇩🇪
IVski
2026-07-17 10:22:08
(6 days ago)
IVski WAF | Sensitive file probe detected - looking for .env
Port Scan
Brute-Force
Web App Attack
🇵🇱
srebrakowski.com
2026-07-17 10:14:43
(6 days ago)
crowdsec/waf-detected-exploits
Brute-Force
🇫🇷
breubit
2026-07-17 09:03:25
(6 days ago)
37.123.193.82 - - [17/Jul/2026:11:03:25 +0200] "GET /server/.env HTTP/1.1" 403 4464 "-" "Mozilla/5.0 ...
show more
37.123.193.82 - - [17/Jul/2026:11:03:25 +0200] "GET /server/.env HTTP/1.1" 403 4464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 08:40:22
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 37.123.193.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 37.123.193.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 04:40:17.282339 2026] [security2:error] [pid 22857:tid 22857] [client 37.123.193.82:45659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "airdriedrivingschool.com"] [uri "/.env.template"] [unique_id "alnqcf5n7U0TX8pvoflcQQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 08:00:45
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 37.123.193.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 37.123.193.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 04:00:37.701743 2026] [security2:error] [pid 9751:tid 9751] [client 37.123.193.82:55877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amazinghydraulics.com"] [uri "/.env~"] [unique_id "alnhJUWRZEG6ktAbVuKLPQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack