๐บ๐ธ
TPI-Abuse
2026-06-27 05:34:23
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 96.0.0.119 (ec2-96-0-0-119.ap-southeast-2.compu ...
show more
(mod_security) mod_security (id:210492) triggered by 96.0.0.119 (ec2-96-0-0-119.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 01:34:18.695993 2026] [security2:error] [pid 13792:tid 13792] [client 96.0.0.119:53710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "humans2humans.org"] [uri "/.env"] [unique_id "aj9g2gziSnnE3K2B0i0J8gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-06-27 03:29:56
(1 day ago)
104 requests with url.path *.env
Brute-Force
Bad Web Bot
๐บ๐ธ
H24
2026-06-27 03:28:49
(1 day ago)
/backend/.env /public/.env /api/.env /v1/.env
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-27 01:22:48
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 96.0.0.119 (ec2-96-0-0-119.ap-southeast-2.compu ...
show more
(mod_security) mod_security (id:210492) triggered by 96.0.0.119 (ec2-96-0-0-119.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 21:22:42.986266 2026] [security2:error] [pid 4798:tid 4798] [client 96.0.0.119:64544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hl-re.com"] [uri "/.env"] [unique_id "aj8l4hp3qn6dYWcTDnMQLwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
David Koswari
2026-06-19 05:45:00
(1 week ago)
REQ_BLOCKED_ACL
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
๐ต๐ฑ
sefinek.net
2026-06-12 22:06:47
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from AU.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from AU.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ธ๐ฎ
administrator
2026-06-10 22:17:10
(2 weeks ago)
2026-06-09 00:07:47,872 fail2ban.actions [1104]: NOTICE [error-bots] Ban 96.0.0.119
2026-06- ...
show more
2026-06-09 00:07:47,872 fail2ban.actions [1104]: NOTICE [error-bots] Ban 96.0.0.119
2026-06-10 00:08:41,039 fail2ban.actions [1080]: NOTICE [error-bots] Ban 96.0.0.119
2026-06-09 00:07:47,872 fail2ban.actions [1104]: NOTICE [error-bots] Ban 96.0.0.119
2026-06-10 00:08:41,039 fail2ban.actions [1080]: NOTICE [error-bots] Ban 96.0.0.119
...
show less
Bad Web Bot
Web Spam
Email Spam
Blog Spam
Port Scan
Brute-Force
Web App Attack
๐ฆ๐บ
oncord
2026-06-08 05:08:38
(2 weeks ago)
Form spam
Web Spam
๐ณ๐ฑ
i-turnradio.nl
2026-06-08 03:54:48
(2 weeks ago)
2026-06-08 @ 05:54:47 (CET) ~ Blocked for trying to access: /erker/wp-login.php
Web App Attack
๐ต๐ฑ
sefinek.net
2026-06-08 00:13:27
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from AU.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from AU.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Xbox; Xbox One) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edge/44.18363.8131 โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
abdubhai
2026-06-06 13:17:15
(3 weeks ago)
96.0.0.119 - - [06/Jun/2026:18:1
...
Brute-Force
Anonymous
2026-06-06 12:29:38
(3 weeks ago)
[osotir.org] httpd-xmlrpc-post: sites=agonistes.gr.synathlountes; logs=/var/log/httpd/domains/agonis ...
show more
[osotir.org] httpd-xmlrpc-post: sites=agonistes.gr.synathlountes; logs=/var/log/httpd/domains/agonistes.gr.synathlountes.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-05 15:05:20
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 96.0.0.119 (ec2-96-0-0-119.ap-southeast-2.compu ...
show more
(mod_security) mod_security (id:210492) triggered by 96.0.0.119 (ec2-96-0-0-119.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 11:05:13.742601 2026] [security2:error] [pid 22376:tid 22376] [client 96.0.0.119:58761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "appalachianfolkmagician.com"] [uri "/.env"] [unique_id "aiLlqatwTcy6bH-9ypm-_QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
MAGIC
2026-06-03 02:25:58
(3 weeks ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ต๐ฑ
sefinek.net
2026-06-02 21:46:01
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from AU.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from AU.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot