🇳🇱
jjnxpct
2025-11-29 04:55:45
(9 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /psnlink/.env (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /psnlink/.env]
show less
Hacking
Web App Attack
🇲🇾
Rizzy
2025-11-29 02:50:50
(9 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
routerjockey
2025-11-29 00:53:37
(9 months ago)
[sensor1] Observed 229 TCP SYN probes in the past 6 hours [Top port 443/tcp(229x)]
Port Scan
🇩🇪
Prodscape
2025-11-29 00:51:45
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 52.67.124.111 (BR/Brazil/ec2-52-67-124-111.sa-e ...
show more
(mod_security) mod_security (id:210492) triggered by 52.67.124.111 (BR/Brazil/ec2-52-67-124-111.sa-east-1.compute.amazonaws.com): 5 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC
show less
Port Scan
🇳🇱
Savvii
2025-11-28 22:20:03
(9 months ago)
20 attempts against mh-misbehave-ban on comet
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 22:11:24
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 52.67.124.111 (ec2-52-67-124-111.sa-east-1.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 52.67.124.111 (ec2-52-67-124-111.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 17:11:18.524204 2025] [security2:error] [pid 2416:tid 2416] [client 52.67.124.111:48068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "postermodelsworldwideinc.com"] [uri "/.env.development"] [unique_id "aSoeBtJ9OUdKk9pp0OI5CAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 20:21:09
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 52.67.124.111 (ec2-52-67-124-111.sa-east-1.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 52.67.124.111 (ec2-52-67-124-111.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 15:21:05.943267 2025] [security2:error] [pid 14302:tid 14302] [client 52.67.124.111:56544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prezence.com"] [uri "/.env.production"] [unique_id "aSoEMRc6vFvjoyg2V2h2vwAAADs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 19:25:48
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 52.67.124.111 (ec2-52-67-124-111.sa-east-1.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 52.67.124.111 (ec2-52-67-124-111.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 14:25:42.671225 2025] [security2:error] [pid 2987536:tid 2987543] [client 52.67.124.111:54860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proto.wizart.org"] [uri "/database/.env"] [unique_id "aSn3Nme73KCdbfsqBNy9pgAAAQQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 19:04:07
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 52.67.124.111 (ec2-52-67-124-111.sa-east-1.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 52.67.124.111 (ec2-52-67-124-111.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 14:04:02.396953 2025] [security2:error] [pid 27583:tid 27583] [client 52.67.124.111:60630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prot.gabosoftware.com"] [uri "/.git/config"] [unique_id "aSnyIrzQ9zBtpslBpjh7wwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 18:41:20
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 52.67.124.111 (ec2-52-67-124-111.sa-east-1.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 52.67.124.111 (ec2-52-67-124-111.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 13:41:14.058642 2025] [security2:error] [pid 14725:tid 14725] [client 52.67.124.111:57054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prostar.industries"] [uri "/.git/config"] [unique_id "aSnsyuBI8xn3iOtsbGUn3gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
kanibalcz
2022-03-20 17:02:14
(4 years ago)
POST /admin/
Brute-Force