🇩🇪
big-cloud.nl
2026-08-28 22:32:52
(8 hours ago)
Try to access /portal/.git/config
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-28 22:01:46
(8 hours ago)
Auto-ban: >3000 req/min op 2026-08-28
Web App Attack
SSH
Hacking
🇳🇱
middelkoopcc
2026-08-28 21:06:02
(9 hours ago)
2026-08-28 23:02:58 GET /.git/config [301] && 2026-08-28 23:03:00 GET /.env [301] && 2026-08-28 23:0 ...
show more
2026-08-28 23:02:58 GET /.git/config [301] && 2026-08-28 23:03:00 GET /.env [301] && 2026-08-28 23:03:03 GET /.git/config [404] && 189 more within 20 minutes
show less
Web App Attack
🇳🇱
ConsulHosting
2026-08-28 21:02:58
(9 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇧🇪
cmbplf
2025-09-30 14:29:58
(10 months ago)
1.382 requests with url.path *.env
Brute-Force
Bad Web Bot
🇩🇪
grassau.com
2025-09-30 14:16:17
(10 months ago)
(mod_security) mod_security triggered on hostname [redacted] 47.129.194.0 (SG/Singapore/ec2-47-129-1 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 47.129.194.0 (SG/Singapore/ec2-47-129-194-0.ap-southeast-1.compute.amazonaws.com)
show less
SQL Injection
2025-09-30 13:31:25
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-09-30 09:50:57
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 47.129.194.0 (ec2-47-129-194-0.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 47.129.194.0 (ec2-47-129-194-0.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 30 05:50:51.858233 2025] [security2:error] [pid 7394:tid 7394] [client 47.129.194.0:39852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelholdengc.com"] [uri "/.env"] [unique_id "aNun-8a72mQV8xatPRMongAAAAA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-30 08:46:29
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 47.129.194.0 (ec2-47-129-194-0.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 47.129.194.0 (ec2-47-129-194-0.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 30 04:46:23.236259 2025] [security2:error] [pid 15124:tid 15124] [client 47.129.194.0:38128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michelle.arriagarealestate.com"] [uri "/.env"] [unique_id "aNuY328TdHmnY0EwStKShQAAAAQ"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-30 08:21:26
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 47.129.194.0 (ec2-47-129-194-0.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 47.129.194.0 (ec2-47-129-194-0.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 30 04:21:21.029202 2025] [security2:error] [pid 26361:tid 26361] [client 47.129.194.0:45242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelward.com"] [uri "/.env"] [unique_id "aNuTATAG-o1RmRZpcGDI5gAAAAk"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack