🇮🇱
spd.co.il
2026-08-06 19:01:54
UTC ·
(3 months ago)
Web application attack detected
Hacking
Web App Attack
🇫🇷
IRISIO
2026-08-05 07:58:32
UTC ·
(3 months ago)
scans/SQL injection/spam posts : 650 queries
Web App Attack
SQL Injection
🇺🇸
TPI-Abuse
2026-08-04 19:01:29
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 8.228.28.26 (26.28.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 15:01:21.531656 2026] [security2:error] [pid 346698:tid 346 ...
show more
(mod_security) mod_security (id:210492) triggered by 8.228.28.26 (26.28.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 15:01:21.531656 2026] [security2:error] [pid 346698:tid 346698] [client 8.228.28.26:6398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.arklatexds.com"] [uri "/@fs/root/.env"] [unique_id "anI3Achc9U5VvPeSk1Ng9gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-04 18:41:08
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 8.228.28.26 (26.28.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 14:41:03.501470 2026] [security2:error] [pid 2490308:tid 24 ...
show more
(mod_security) mod_security (id:210492) triggered by 8.228.28.26 (26.28.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 14:41:03.501470 2026] [security2:error] [pid 2490308:tid 2490308] [client 8.228.28.26:18288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aiinlocal.com"] [uri "/@fs/root/.env"] [unique_id "anIyP3YGwfZmAlOsc04ZDgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-08-04 18:09:09
UTC ·
(3 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇫🇮
paissangroup
2026-08-04 15:08:01
UTC ·
(3 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-08-04 15:05:02
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 8.228.28.26 (26.28.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 11:04:55.917516 2026] [security2:error] [pid 1954986:tid 19 ...
show more
(mod_security) mod_security (id:210492) triggered by 8.228.28.26 (26.28.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 11:04:55.917516 2026] [security2:error] [pid 1954986:tid 1954986] [client 8.228.28.26:26458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.juncurryahn.com"] [uri "/@fs/.env"] [unique_id "anH_l-2EplAICxelmvILSAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Skyrider
2026-08-04 15:03:01
UTC ·
(3 months ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-08-04 14:59:19
UTC ·
(3 months ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇬🇧
Celtic
2026-08-04 14:52:09
UTC ·
(3 months ago)
Blocked by Fail2Ban with Jail (plesk-modsecurity)
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-08-04 14:45:33
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 8.228.28.26 (26.28.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 10:45:28.489937 2026] [security2:error] [pid 329132:tid 329 ...
show more
(mod_security) mod_security (id:210492) triggered by 8.228.28.26 (26.28.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 10:45:28.489937 2026] [security2:error] [pid 329132:tid 329140] [client 8.228.28.26:62338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.victorchiarizia.com"] [uri "/@fs/.env"] [unique_id "anH7CIf1KuQ3lZk6Rq4r2gAAAQQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-08-04 14:09:03
UTC ·
(3 months ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-08-04 13:54:17
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 8.228.28.26 (26.28.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 09:54:09.970726 2026] [security2:error] [pid 7735:tid 7735] ...
show more
(mod_security) mod_security (id:210492) triggered by 8.228.28.26 (26.28.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 09:54:09.970726 2026] [security2:error] [pid 7735:tid 7735] [client 8.228.28.26:3310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hierrosbernal.ayudaclic.com"] [uri "/@fs/.env"] [unique_id "anHvAb05dVZe7_kEcI2WoQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-04 13:29:11
UTC ·
(3 months ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
TPI-Abuse
2026-08-04 13:17:05
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 8.228.28.26 (26.28.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 09:16:59.624954 2026] [security2:error] [pid 3907148:tid 39 ...
show more
(mod_security) mod_security (id:210492) triggered by 8.228.28.26 (26.28.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 09:16:59.624954 2026] [security2:error] [pid 3907148:tid 3907148] [client 8.228.28.26:3856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.leeknight.com"] [uri "/@fs/root/.env"] [unique_id "anHmS5sCF6OK7H8AoHlf5gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack