🇮🇹
VHosting
2026-09-07 12:55:03
(3 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 12:28:28
(3 hours ago)
(mod_security) mod_security (id:243420) triggered by 34.11.226.28 (28.226.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:243420) triggered by 34.11.226.28 (28.226.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 08:28:20.542686 2026] [security2:error] [pid 24362:tid 24362] [client 34.11.226.28:20160] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:raw??" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||mail.solasx.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mail.solasx.com"] [uri "/.env"] [unique_id "ap6t5BPby2nh8KSwnPB6UgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
pipeline.es
2026-09-07 12:20:30
(4 hours ago)
Web scanning / probing for vulnerable paths | URL: /@fs/var/www/html/.env?raw?? | Evidence: bestrave ...
show more
Web scanning / probing for vulnerable paths | URL: /@fs/var/www/html/.env?raw?? | Evidence: bestravel.pt 34.11.226.28 - - [07/Sep/2026:14:19:55 +0200] \"GET /@fs/var/www/html/.env?raw?? HTTP/1.1\" 404 26756 \"-\" \"Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Chrome/118.0.2382.46 Safari/537.36\" GEOIP_COUNTRY_CODE=US | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
🇳🇱
Savvii
2026-09-07 12:18:49
(4 hours ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
cybersteve99
2026-09-07 12:17:18
(4 hours ago)
Too many 4xx Requests -
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-09-07 12:02:28
(4 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 11:52:47
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.226.28 (28.226.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.226.28 (28.226.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 07:52:43.379770 2026] [security2:error] [pid 9447:tid 9447] [client 34.11.226.28:11658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.randallbrooks.com"] [uri "/@fs/app/.env"] [unique_id "ap6lix2_RDsjjJUJdGR3PgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-07 11:40:04
(4 hours ago)
34.11.226.28 - - [07/Sep/2026:13:40:04 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env? ...
show more
34.11.226.28 - - [07/Sep/2026:13:40:04 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Google-Extended/1.0; +http://www.google.com/bot.html"
34.11.226.28 - - [07/Sep/2026:13:40:04 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; WhatsApp/10.0.2.1)"
34.11.226.28 - - [07/Sep/2026:13:40:04 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.11.226.28 - - [07/Sep/2026:13:40:04 +0200] "GET /@fs/app/rootkey.csv?raw?? HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)"
34.11.226.28 - - [07/Sep/2026:13:40:04 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; facebookexternalhit/1.1; +http://
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Cloud86 B.V.
2026-07-17 07:39:06
(1 month ago)
categories: DDoS Attack
DDoS Attack
🇮🇹
VHosting
2026-07-17 04:55:04
(1 month ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack