🇫🇷
Little Iguana
2026-09-12 11:25:49
(1 month ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇲🇾
Rizzy
2026-09-04 16:50:54
(1 month ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 16:15:47
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.34.77.123 (123.77.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 12:15:42.662147 2026] [security2:error] [pid 20507:tid 20 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.77.123 (123.77.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 12:15:42.662147 2026] [security2:error] [pid 20507:tid 20507] [client 34.34.77.123:16422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wordandwisdom.org"] [uri "/@fs/.env"] [unique_id "aprurvnRmjPhCE49mn0yMAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 14:30:42
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.34.77.123 (123.77.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:30:37.222169 2026] [security2:error] [pid 23006:tid 23 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.77.123 (123.77.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:30:37.222169 2026] [security2:error] [pid 23006:tid 23084] [client 34.34.77.123:59648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wicca-love-spells.com"] [uri "/@fs/.env"] [unique_id "aprWDeK_eLa5AsS1DMl9_gAAAQs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 13:39:00
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.34.77.123 (123.77.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 09:38:56.733194 2026] [security2:error] [pid 30590:tid 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.77.123 (123.77.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 09:38:56.733194 2026] [security2:error] [pid 30590:tid 30590] [client 34.34.77.123:6308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rocketcityhotwheelers.com"] [uri "/@fs/app/.env"] [unique_id "aprJ8BMMdf9Fee7PSVjcPgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-09-04 12:07:45
(1 month ago)
[FriSep0414:07:39.3794132026][security2:error][pid115042:tid115088][client34.34.77.123:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"/etc/passwd\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"141\"][ ...
show more
[FriSep0414:07:39.3794132026][security2:error][pid115042:tid115088][client34.34.77.123:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"/etc/passwd\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"141\"][id\"347009\"][rev\"1\"][msg\"Atomicorp.comWAFRules:ProtectedFileaccessdenied\"][severity\"CRITICAL\"][hostname\"webdisk.bicycleambulance.ch\"][uri\"/@fs/etc/passwd\"][unique_id\"apq0i-YgpKhMQjwhYY4J_wAAAEg\"]
show less
Port Scan
Brute-Force
Web App Attack
🇷🇴
iulianh
2026-09-04 11:22:49
(1 month ago)
80,443
Brute-Force
SSH
🇫🇷
masterguru
2026-09-04 11:15:55
(1 month ago)
Restricted File Access Attempt. Matched phrase "/@fs/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇩🇪
Melle
2026-09-04 10:58:43
(1 month ago)
Unauthorized connection attempt detected from IP address 34.34.77.123
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-04 10:49:04
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.34.77.123 (123.77.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:48:59.195673 2026] [security2:error] [pid 3023:tid 334 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.77.123 (123.77.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:48:59.195673 2026] [security2:error] [pid 3023:tid 3343] [client 34.34.77.123:65276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.accreditedfinancialanalyst.com"] [uri "/@fs/src/.env"] [unique_id "apqiG15P-R4laH8FBXw2_wAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇸
pexodelic
2026-09-04 10:35:13
(1 month ago)
Automated report from web, SSH and FTP server logs: 21 requests probing for exposed secrets (.env, .git, config files); 33 distinct non-existent paths requested (wordlist scanning). First reported 2026-09-04 10:05 UTC, last reported 2026-09-04 12:35 ...
show more
Automated report from web, SSH and FTP server logs: 21 requests probing for exposed secrets (.env, .git, config files); 33 distinct non-existent paths requested (wordlist scanning). First reported 2026-09-04 10:05 UTC, last reported 2026-09-04 12:35 UTC; counts cover the current log rotation window.
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
EGP Abuse Dept
2026-09-04 09:31:06
(1 month ago)
Scanning for web/db/file exploits on tpc-036.mach3builders.nl
SQL Injection
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-04 08:56:52
(1 month ago)
Restricted File Access Attempt. Matched phrase "/@fs/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 08:40:31
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.34.77.123 (123.77.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 04:40:24.887145 2026] [security2:error] [pid 6376:tid 637 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.77.123 (123.77.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 04:40:24.887145 2026] [security2:error] [pid 6376:tid 6376] [client 34.34.77.123:33558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lockyers.com"] [uri "/@fs/app/.env"] [unique_id "apqD-IhCZJ0DluASpZeYkQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-09-04 08:32:15
(1 month ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
