🇺🇸
ipblock.com
2026-07-10 11:50:00
(15 hours ago)
IPBlock protected site ID [4055-d][s=07].
Persistent 404, vulnerability scanner
Hacking
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-07-10 04:00:04
(23 hours ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇨🇭
zynex
2026-07-10 02:42:53
(1 day ago)
URL Probing: /.env
Web App Attack
🇳🇱
Mangelot Hosting
2026-07-10 00:18:11
(1 day ago)
(db_admin_scan) srv103 DB admin scan 64.112.56.137 (US/United States/-): 1 in the last 3600 secs; Po ...
show more
(db_admin_scan) srv103 DB admin scan 64.112.56.137 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 00:09:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 64.112.56.137 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 64.112.56.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 20:09:21.154382 2026] [security2:error] [pid 31850:tid 31850] [client 64.112.56.137:46037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.officechristmascards.com"] [uri "/.env.prod"] [unique_id "alA4Ma4Mn7V5DXlFXGBUcwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-07-09 21:41:07
(1 day ago)
Probing for Exploits on ns153
Exploited Host
Web App Attack
🇳🇱
MacLotsen
2026-07-09 20:13:15
(1 day ago)
Violated robots.txt
Web Spam
🇩🇪
FeG Deutschland
2026-07-09 19:26:36
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇨🇭
backslash
2026-07-09 18:12:01
(1 day ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇫🇷
mikekarl
2026-07-09 16:51:31
(1 day ago)
SQL INJECTION booking_2_kiosk''
SQL Injection
🇦🇺
paulshipley.com.au
2026-07-09 12:51:10
(1 day ago)
[Thu Jul 09 22:51:09.224746 2026] [security2:error] [pid 512233] [client 64.112.56.137:59559] [clien ...
show more
[Thu Jul 09 22:51:09.224746 2026] [security2:error] [pid 512233] [client 64.112.56.137:59559] [client 64.112.56.137] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/.env.dev"] [unique_id "ak-ZPfwtnawhlhAkiiqblgAAAA0"]
...
show less
Web App Attack
🇺🇸
ipblock.com
2026-07-09 09:24:00
(1 day ago)
IPBlock protected site ID [4055-d][s=02].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2026-07-09 08:45:04
(1 day ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 08:41:45
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 64.112.56.137 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 64.112.56.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 04:41:25.944403 2026] [security2:error] [pid 7600:tid 7600] [client 64.112.56.137:56599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whatifandwhynot.xyz"] [uri "/.env.dev.local"] [unique_id "ak9etf3iFT59FTYjVNq8AAAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 07:17:56
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 64.112.56.137 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 64.112.56.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 03:17:30.637276 2026] [security2:error] [pid 819265:tid 819265] [client 64.112.56.137:45883] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psdinnersready.com"] [uri "/.env.dev"] [unique_id "ak9LClBWUZEEsebtJW35EwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack