Anonymous
2026-09-06 07:09:12
(18 hours ago)
Bot / seems abusive / Apache connections: 44
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 03:55:28
(21 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.100.174.130 (130.174.100.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.100.174.130 (130.174.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:55:20.447613 2026] [security2:error] [pid 26204:tid 26229] [client 34.100.174.130:53014] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||alexidevilliers.cynosureinternetservices.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alexidevilliers.cynosureinternetservices.com"] [uri "/db.sql"] [unique_id "apzkKNBbnM4DZJ7oJiN-jAAAARY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-06 03:39:58
(22 hours ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-09-06 03:36:25
(22 hours ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
🇩🇪
raph
2026-09-06 03:02:44
(22 hours ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:59:01
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.100.174.130 (130.174.100.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.174.130 (130.174.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:58:56.155351 2026] [security2:error] [pid 3596235:tid 3596235] [client 34.100.174.130:47598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mandytony.tonylai.com"] [uri "/.env.bak"] [unique_id "apzI4O1A61H4Dqz_8G-82AAAAGs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-09-06 01:55:20
(23 hours ago)
Aggressive scanning resulting into 404
Bad Web Bot
🇩🇪
ger-stg-sifi1
2026-09-06 01:11:35
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:09:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.100.174.130 (130.174.100.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.174.130 (130.174.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:09:01.628589 2026] [security2:error] [pid 5712:tid 5712] [client 34.100.174.130:42752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cynthiabaxter.com"] [uri "/.env.backup"] [unique_id "apy9LeGczKSDMO2mozS4XQAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-09-06 00:40:48
(1 day ago)
[SunSep0602:40:41.1921422026][security2:error][pid2463455:tid2464336][client34.100.174.130:0]ModSecu ...
show more
[SunSep0602:40:41.1921422026][security2:error][pid2463455:tid2464336][client34.100.174.130:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"hosting-domain-swiss.com\"][uri\"/.env.local\"][unique_id\"apy2iXiKnPDLjkFpU9fTWQAAAAI\"]
show less
Hacking
Web App Attack
🇳🇿
Tripwire
2026-09-06 00:39:48
(1 day ago)
Scanning for exploits - /.env.local
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 00:23:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.100.174.130 (130.174.100.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.174.130 (130.174.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 20:23:19.444973 2026] [security2:error] [pid 15171:tid 15171] [client 34.100.174.130:38176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laboquimia.es"] [uri "/.env.bak"] [unique_id "apyyd3RqRKrOXUvZLZ-mbQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-05 23:59:25
(1 day ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-09-05 23:54:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.100.174.130 (130.174.100.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.174.130 (130.174.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 19:54:23.649168 2026] [security2:error] [pid 3505775:tid 3505873] [client 34.100.174.130:48298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.joshuapaulweckesser.com"] [uri "/.env.old"] [unique_id "apyrr78ERl7gWgWoAPLX1AAAAY8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 22:55:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.100.174.130 (130.174.100.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.174.130 (130.174.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:55:49.717275 2026] [security2:error] [pid 13596:tid 13596] [client 34.100.174.130:56620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.stoneageartifacts.com"] [uri "/.env.local"] [unique_id "apyd9RynFClB1By_r38zGAAAAGk"]
show less
Brute-Force
Bad Web Bot
Web App Attack