2026-08-09 04:32:58
(1 week ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇳🇱
homeshowdomain.nl
2026-08-05 22:01:21
(2 weeks ago)
Auto-ban: >3000 req/min op 2026-08-05
Web App Attack
SSH
Hacking
🇧🇪
cmbplf
2026-08-05 17:05:48
(2 weeks ago)
1.251 requests to many distinct domains in 1 hour (2w6h22m)
Brute-Force
Bad Web Bot
🇫🇷
Baking333
2026-08-05 17:02:14
(2 weeks ago)
[redacted] 209.87.162.158 - - [05/Aug/2026:18:02:10 +0100] "GET /.env HTTP/2.0" 301 291 "-" "Mozilla ...
show more
[redacted] 209.87.162.158 - - [05/Aug/2026:18:02:10 +0100] "GET /.env HTTP/2.0" 301 291 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" [redacted] 209.87.162.158 - - [05/Aug/2026:18:02:11 +0100] "GET /fr/.env/ HTTP/2.0" 404 26603 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Bad Web Bot
Web App Attack
🇩🇪
bryth
2026-08-05 16:49:21
(2 weeks ago)
Wordpress login/xmlrpc abuse (Wed Aug 5 04:32:37 PM UTC 2026)
Hacking
Web App Attack
🇬🇧
Aetherweb Ark
2026-08-05 15:21:12
(2 weeks ago)
(mod_security) mod_security (id:949110) triggered by 209.87.162.158 (US/United States/-): N in the l ...
show more
(mod_security) mod_security (id:949110) triggered by 209.87.162.158 (US/United States/-): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-05 14:59:44
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 209.87.162.158 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.87.162.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 10:59:38.030960 2026] [security2:error] [pid 3871573:tid 3871573] [client 209.87.162.158:52777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chelseafootballprogrammes.com"] [uri "/.env"] [unique_id "anNP2vwS5i4MN1CJcZpH0gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
zulzeen
2026-08-05 14:43:04
(2 weeks ago)
[incypit-web] Banned by Fail2ban (Jail: syswarden-secretshunter)
Hacking
Web App Attack
Bad Web Bot
Port Scan
🇺🇸
TPI-Abuse
2026-08-05 14:41:40
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 209.87.162.158 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.87.162.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 10:41:33.693110 2026] [security2:error] [pid 3692072:tid 3692072] [client 209.87.162.158:55873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "d-sinema.com"] [uri "/.env"] [unique_id "anNLnb27HbK6WO5moQ5HuQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
interbiznw.com
2026-08-05 14:27:20
(2 weeks ago)
fail2ban-ban
Hacking
Brute-Force
Exploited Host
Web App Attack
2026-08-05 14:14:47
(2 weeks ago)
209.87.162.158 - - [05/Aug/2026:14:14:46 +0000] "GET /.env HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macint ...
show more
209.87.162.158 - - [05/Aug/2026:14:14:46 +0000] "GET /.env HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" "209.87.162.158" "-"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-05 14:02:39
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 209.87.162.158 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.87.162.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 10:02:35.132028 2026] [security2:error] [pid 1411586:tid 1411586] [client 209.87.162.158:45609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goddesskink.com"] [uri "/.env"] [unique_id "anNCe9Lw-vDGEoO_TwlQFAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-05 13:52:02
(2 weeks ago)
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1
Hacking
Web App Attack
🇩🇪
piticu iuli
2026-08-05 13:34:40
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 209.87.162.158 (US/United States/-)
SQL Injection
2026-08-05 13:30:13
(2 weeks ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot