🇫🇷
Catalin Negru
2026-09-09 04:38:08
(11 hours ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇮🇳
evicky2002
2026-09-09 00:01:20
(15 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇦🇺
rubixstudios
2026-09-08 13:00:02
(1 day ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-09-08 12:39:47
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
dbmwebdesign
2026-09-08 12:35:14
(1 day ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 12:03:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.184.3 (3.184.126.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.184.3 (3.184.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 08:03:08.066893 2026] [security2:error] [pid 31078:tid 31078] [client 34.126.184.3:21914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.retiredengineers.net"] [uri "/@fs/.env"] [unique_id "ap_5fCMAtWmGKJurLLiQVgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-08 11:52:11
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-08 11:42:33
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.184.3 (3.184.126.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.184.3 (3.184.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 07:42:28.867339 2026] [security2:error] [pid 27510:tid 27510] [client 34.126.184.3:44442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.natickvillagerentals.com"] [uri "/@fs/../../.env"] [unique_id "ap_0pH6TMr4Z8N46Dd8QigAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 10:59:29
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.184.3 (3.184.126.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.184.3 (3.184.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 06:59:22.630103 2026] [security2:error] [pid 8856:tid 8856] [client 34.126.184.3:7196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.allynrealty.com"] [uri "/@fs/src/.env"] [unique_id "ap_qip2RUhZQNAfi1Jtr7QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-09-08 09:50:08
(1 day ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇫🇷
masterguru
2026-09-08 08:45:08
(1 day ago)
Restricted File Access Attempt. Matched phrase "/@fs/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 08:31:43
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.184.3 (3.184.126.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.184.3 (3.184.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 04:31:38.667643 2026] [security2:error] [pid 17009:tid 17009] [client 34.126.184.3:53002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cms2020.com"] [uri "/@fs/.env"] [unique_id "ap_H6uq62Fa7aEaufCFbKwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
iulianh
2026-09-08 08:10:10
(1 day ago)
80,443
Brute-Force
SSH
2026-09-08 08:05:10
(1 day ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 07:36:29
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.184.3 (3.184.126.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.184.3 (3.184.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 03:36:25.012203 2026] [security2:error] [pid 16526:tid 16526] [client 34.126.184.3:63668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mlappa.net"] [uri "/@fs/../../.env"] [unique_id "ap-6-bNEOzZf1F8nZniS3gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
