🇳🇱
e.fierstra
2026-04-19 11:25:43
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-04-19 11:24:42
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
masterguru
2026-04-19 07:26:48
(1 month ago)
BAD BOT - Detected and Blocked.. Matched phrase "yandex" at REQUEST_HEADERS:User-Agent. (1100000-201 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "yandex" at REQUEST_HEADERS:User-Agent. (1100000-201)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-18 12:02:00
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 88.151.32.188 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 88.151.32.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 08:01:57.251731 2026] [security2:error] [pid 1662285:tid 1662285] [client 88.151.32.188:45640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yourmenu.xyz"] [uri "/.env"] [unique_id "aeNytWLxOhdTdSoFePNTTAAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-18 11:29:38
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 88.151.32.188 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 88.151.32.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 07:29:31.540767 2026] [security2:error] [pid 14261:tid 14261] [client 88.151.32.188:48284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.wherecaniget.xyz"] [uri "/.env"] [unique_id "aeNrG-p6cQSOjR8FOz0aXQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-04-18 05:43:43
(1 month ago)
{"level":"info","ts":1776487108.0315182,"logger":"http.log.access.log0","msg":"handled request","req ...
show more
{"level":"info","ts":1776487108.0315182,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"88.151.32.188","remote_port":"35146","client_ip":"88.151.32.188","proto":"HTTP/1.1","method":"GET","host":"qsy7.status.updown.io","uri":"/debug.env","headers":{"Accept-Encoding":["gzip, deflate"],"User-Agent":["Mozilla/5.0 (compatible; YouBot/1.0; +https://about.you.com/youbot/)"],"Cookie":["REDACTED"],"Accept":["*/*"],"Connection":["keep-alive"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"qsy7.status.updown.io"}},"bytes_read":0,"user_id":"","duration":0.000045125,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1776487108.0317647,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"88.151.32.188","remote_port":"35352","client_ip":"88.151.32.188","proto":"HTTP/1.1","method":"GET","host":"qsy7.status.updown.
...
show less
DDoS Attack
Web App Attack
🇳🇿
Antinson
2026-04-17 21:13:29
(1 month ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇩🇪
barbarella
2026-04-17 20:56:33
(1 month ago)
Multiple (17) times attack on https port 443: Configuration snooping with .env file (GET /.env)
2 ...
show more
Multiple (17) times attack on https port 443: Configuration snooping with .env file (GET /.env)
22:56:36 Configuration snooping in .env file (GET /.env.local)
22:56:39 Configuration snooping in .env file (GET /.env.production)
22:56:44 Configuration snooping in .env file (GET /.env.development)
22:56:46 Configuration snooping in .env file (GET /.env.bak)
22:56:49 Configuration snooping in .env file (GET /.env.backup)
22:56:53 Configuration snooping (GET /config.json)
22:56:55 unauthorized access to Visual Studio Code - SFTP Extension (GET /appsettings.json)
22:56:57 unauthorized access to Visual Studio Code - SFTP Extension (GET /secrets.json)
show less
Hacking
Web App Attack
🇦🇺
Anytech
2026-04-17 20:49:33
(1 month ago)
Blocked by Conn-Monitor
Hacking
Web App Attack
🇨🇭
backslash
2026-04-17 20:42:04
(1 month ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇬🇧
consul.to
2026-04-17 10:42:00
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-04-16 18:51:46
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 88.151.32.188 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 88.151.32.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 14:51:42.493289 2026] [security2:error] [pid 1005603:tid 1005629] [client 88.151.32.188:11282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aafmae.aafm.us"] [uri "/.env"] [unique_id "aeEvvkC1tBySPTBQ5w2ofgAAARY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-16 15:06:21
(1 month ago)
Blocked: Reason='Suspicious traffic score=90 (review-based detection)'; Requests=73
Hacking
🇪🇸
masterguru
2026-04-16 14:18:51
(1 month ago)
BAD BOT - Detected and Blocked.. Matched phrase "PerplexityBot" at REQUEST_HEADERS:User-Agent. (1100 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "PerplexityBot" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Bad Web Bot
🇳🇿
Antinson
2026-04-16 14:02:12
(1 month ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot