🇳🇱
i-turnradio.nl
2026-06-13 06:09:51
(28 minutes ago)
2026-06-13 @ 08:09:50 (CET) ~ Blocked for trying to access: /api/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 04:02:20
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 88.151.33.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 88.151.33.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 00:02:13.324883 2026] [security2:error] [pid 15014:tid 15014] [client 88.151.33.142:42336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ohioaci.org"] [uri "/.env.example"] [unique_id "aizWRQQKDCdpXKTz_V77qgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Matthew Ping
2026-06-13 03:45:08
(2 hours ago)
ModSecurity rule 949110 triggered on wp2. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
🇺🇸
oralunal
2026-06-13 01:40:33
(4 hours ago)
IP banned by Fail2Ban in jail its-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-13 01:32:28
(5 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 00:37:31
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 88.151.33.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 88.151.33.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 20:37:25.704608 2026] [security2:error] [pid 3884:tid 3957] [client 88.151.33.142:38910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "officialseniorworldgolfranking.com"] [uri "/.env"] [unique_id "aiymRWAnlZDbbIwDOFx4zwAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
Saec
2026-06-13 00:00:08
(6 hours ago)
Jarvis auto-ban: CF top attacker on saec.me (40 hits, NL)
Port Scan
Web App Attack
🇯🇵
VXG-NET
2026-06-12 23:51:01
(6 hours ago)
port=80, indicator_type=info-leak
Hacking
🇫🇷
SpaceHost-Server
2026-06-12 22:31:00
(8 hours ago)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-12 21:59:40
(8 hours ago)
Auto-ban: >3000 req/min op 2026-06-12
Web App Attack
SSH
Hacking
🇨🇭
ca
2026-06-12 21:55:03
(8 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
🇨🇿
Prcek
2026-06-12 21:40:21
(8 hours ago)
PortScan:HOST=88.151.33.142,DPORTS=80,443
Port Scan
🇧🇪
cmbplf
2026-06-12 20:33:19
(10 hours ago)
403 requests with url.path *.env
141 requests with url.path *credentials.json
119 requests with u ...
show more
403 requests with url.path *.env
141 requests with url.path *credentials.json
119 requests with url.path *config.json
111 requests with url.path *secrets.yml
show less
Brute-Force
Bad Web Bot
🇩🇪
macrob
2026-06-12 20:26:47
(10 hours ago)
2026/06/12 20:26:38 [error] 2268805#2268805: *301212046 access forbidden by rule, client: 88.151.33. ...
show more
2026/06/12 20:26:38 [error] 2268805#2268805: *301212046 access forbidden by rule, client: 88.151.33.142, server: fastcredit.net.ua, request: "GET /.aws/credentials HTTP/2.0", host: "fastcredit.net.ua"
2026/06/12 20:26:38 [error] 2268805#2268805: *301211524 access forbidden by rule, client: 88.151.33.142, server: fastcredit.net.ua, request: "GET /.env HTTP/2.0", host: "fastcredit.net.ua"
2026/06/12 20:26:46 [error] 2268806#2268806: *301211571 access forbidden by rule, client: 88.151.33.142, server: fastcredit.net.ua, request: "GET /backend/.env HTTP/2.0", host: "fastcredit.net.ua"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 20:01:35
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 88.151.33.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 88.151.33.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 16:01:28.589350 2026] [security2:error] [pid 2718:tid 2718] [client 88.151.33.142:34260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "offbeatcompassion.com"] [uri "/.env.example"] [unique_id "aixlmLnqoEkeXIHoTl3zNQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack