🇳🇱
homeshowdomain.nl
2026-04-06 21:59:34
UTC ·
(7 months ago)
Auto-ban: >3000 req/min op 2026-04-06
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-04-06 09:18:47
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.6.229 (sensorsguide.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 05:18:42.366978 2026] [security2:error] [pid 26746:tid 26746] [client 91.234.6 ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.6.229 (sensorsguide.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 05:18:42.366978 2026] [security2:error] [pid 26746:tid 26746] [client 91.234.6.229:54171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.twccsolutions.com"] [uri "/.vercel/.env.production.local"] [unique_id "adN6cuzFxoXtP-DGr2xiJAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 07:51:06
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.6.229 (sensorsguide.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 03:50:58.018520 2026] [security2:error] [pid 9507:tid 9507] [client 91.234.6.2 ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.6.229 (sensorsguide.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 03:50:58.018520 2026] [security2:error] [pid 9507:tid 9507] [client 91.234.6.229:42655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.landscapedesignworkshop.com"] [uri "/laravel/.env"] [unique_id "adNl4ibKeVncsxBfxGEzdAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-04-06 07:47:37
UTC ·
(7 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇵🇱
IROK
2026-04-06 05:31:23
UTC ·
(7 months ago)
Firewall Blocked - Unauthorized Port Scanning
...
Port Scan
🇸🇪
nekopavel
2026-04-06 05:23:49
UTC ·
(7 months ago)
91.234.6.229 - - [06/Apr/2026:07:23:47 +0200]"GET /web/.env HTTP/1.1" 404 118"-" autoconfig.pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36""0.000" "0.001""Kyiv" "UA"
91.234.6.229 - - [06/Apr/2026:07:23:47 +0200]"GET /src/.env ...
show more
91.234.6.229 - - [06/Apr/2026:07:23:47 +0200]"GET /web/.env HTTP/1.1" 404 118"-" autoconfig.pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36""0.000" "0.001""Kyiv" "UA"
91.234.6.229 - - [06/Apr/2026:07:23:47 +0200]"GET /src/.env HTTP/1.1" 404 118"-" autoconfig.pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36""0.000" "0.001""Kyiv" "UA"
91.234.6.229 - - [06/Apr/2026:07:23:47 +0200]"GET /server/.env HTTP/1.1" 404 118"-" autoconfig.pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36""0.001" "0.000""Kyiv" "UA"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-04-06 05:14:00
UTC ·
(7 months ago)
91.234.6.229 - - [06/Apr/2026:05:13:55 +0000] "GET /.git/config HTTP/1.1" 200 2116 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
Brute-Force
Web App Attack
🇩🇪
patrisei
2026-04-06 04:57:14
UTC ·
(7 months ago)
CrowdSec Drop is better than Reject: crowdsecurity/http-probing
Port Scan
Web App Attack
🇩🇪
FeG Deutschland
2026-04-06 04:18:45
UTC ·
(7 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇳🇱
e.fierstra
2026-04-06 04:14:43
UTC ·
(7 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 04:14:30
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.6.229 (sensorsguide.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 00:14:22.547176 2026] [security2:error] [pid 20251:tid 20251] [client 91.234.6 ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.6.229 (sensorsguide.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 00:14:22.547176 2026] [security2:error] [pid 20251:tid 20251] [client 91.234.6.229:60307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aupapierjaponais.com"] [uri "/.env"] [unique_id "adMzHhSTHqNv0fzOyAqMOQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 03:11:49
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.6.229 (sensorsguide.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 23:11:43.876193 2026] [security2:error] [pid 14746:tid 14746] [client 91.234.6 ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.6.229 (sensorsguide.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 23:11:43.876193 2026] [security2:error] [pid 14746:tid 14746] [client 91.234.6.229:50653] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atlascoombs.com"] [uri "/.env.local"] [unique_id "adMkbzSmJ03tHk5qr6AOHQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-04-06 01:44:50
UTC ·
(7 months ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 01:42:49
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 91.234.6.229 (sensorsguide.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 21:42:42.809550 2026] [security2:error] [pid 22309:tid 22309] [client 91.234.6 ...
show more
(mod_security) mod_security (id:210492) triggered by 91.234.6.229 (sensorsguide.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 21:42:42.809550 2026] [security2:error] [pid 22309:tid 22309] [client 91.234.6.229:48527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "assec.org"] [uri "/.env.local"] [unique_id "adMPkihRgX7vVaKTeMqv_wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-04-06 00:56:32
UTC ·
(7 months ago)
91.234.6.229 - - [06/Apr/2026:00:56:31 +0000] "GET /.env.local HTTP/1.1" 404 34502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
Bad Web Bot
Web App Attack