๐บ๐ธ
mnsf
2026-09-28 10:05:12
(10 hours ago)
Abuse Detected (12)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 09:51:45
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.101.143.241 (241.143.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.143.241 (241.143.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 05:51:41.476649 2026] [security2:error] [pid 19936:tid 19936] [client 34.101.143.241:43662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pandalearningcenters.com.stlouisdave.com"] [uri "/.git/config"] [unique_id "aro4rULv7pIYu0WW0AVRIwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 06:12:35
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.101.143.241 (241.143.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.143.241 (241.143.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 02:12:27.813581 2026] [security2:error] [pid 29473:tid 29473] [client 34.101.143.241:55546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.panama-boat-registration.com.boatregistrationdelaware.com"] [uri "/.git/config"] [unique_id "aroFS4gjYIp9G-y1E_uVrAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-09-28 05:33:34
(15 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 04:55:03
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.101.143.241 (241.143.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.143.241 (241.143.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 00:54:56.722239 2026] [security2:error] [pid 8183:tid 8183] [client 34.101.143.241:44070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pamplonaserviciotecnico.ayudaclic.com"] [uri "/.git/config"] [unique_id "arnzIAEL8W5OyzZclklC6AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-09-27 17:03:24
(1 day ago)
[SunSep2719:03:19.9809112026][security2:error][pid3911276:tid3911353][client34.101.143.241:0]ModSecu ...
show more
[SunSep2719:03:19.9809112026][security2:error][pid3911276:tid3911353][client34.101.143.241:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.pytag.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"arlMV8XMhlkc8SZpw6dh0gAAAI0\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
dot.mg
2026-09-27 10:37:03
(1 day ago)
Bad behaviour
Web Spam
๐ช๐ธ
pipeline.es
2026-09-27 08:24:09
(1 day ago)
Web scanning / probing for vulnerable paths | URL: /.env.old | Evidence: origens-douro.com 34.101.14 ...
show more
Web scanning / probing for vulnerable paths | URL: /.env.old | Evidence: origens-douro.com 34.101.143.241 - - [27/Sep/2026:10:23:37 +0200] \"GET /.env.old HTTP/1.1\" 404 21169 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=ID | ASN: GOOGLE-CLOUD-PLATFORM | Country: ID
show less
Port Scan
Web App Attack
๐ฉ๐ช
33three
2026-09-27 06:41:41
(1 day ago)
Fail2Ban jail WebAttack triggered
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-26 10:11:45
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.101.143.241 (241.143.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.143.241 (241.143.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 06:11:42.417663 2026] [security2:error] [pid 2042:tid 2042] [client 34.101.143.241:60824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pastorsform.cmabiblequizzing.org"] [uri "/.git/config"] [unique_id "areaXn-02dRlyponnNmxCgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-09-26 08:25:23
(2 days ago)
34.101.143.241 - - [26/Sep/2026:08:25:00 +0000] "GET /.env HTTP/1.1" 403 7444 "-" "Mozilla/5.0 (Maci ...
show more
34.101.143.241 - - [26/Sep/2026:08:25:00 +0000] "GET /.env HTTP/1.1" 403 7444 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.101.143.241"
34.101.143.241 - - [26/Sep/2026:08:25:00 +0000] "GET /.env.local HTTP/1.1" 403 7444 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.101.143.241"
34.101.143.241 - - [26/Sep/2026:08:25:01 +0000] "GET /.env.production HTTP/1.1" 403 7444 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.101.143.241"
34.101.143.241 - - [26/Sep/2026:08:25:01 +0000] "GET /.env.staging HTTP/1.1" 403 7444 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.101.143.241"
34.101.143.241 - - [26/Sep/2026:08:25:02 +0000] "GET /.env.deve
...
show less
Web App Attack
๐ฌ๐ง
consul.to
2026-09-26 08:21:53
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-09-26 05:15:21
(2 days ago)
250 attacks on VC URLs, env grabbing URLs, PHP URLs:
GET /.git/config HTTP/1.1
GET /config/app/.env ...
show more
250 attacks on VC URLs, env grabbing URLs, PHP URLs:
GET /.git/config HTTP/1.1
GET /config/app/.env HTTP/1.1
GET /includes/phpinfo.php HTTP/1.1
show less
Hacking
Web App Attack
Anonymous
2026-09-26 03:46:17
(2 days ago)
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-25 14:26:50
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.101.143.241 (241.143.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.143.241 (241.143.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 10:26:42.827196 2026] [security2:error] [pid 16430:tid 16430] [client 34.101.143.241:46458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "495metro.com"] [uri "/.git/config"] [unique_id "araEoud_qm2ReyCmY-KFEQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack