🇳🇱
homeshowdomain.nl
2026-08-28 22:02:53
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27.
show less
Web App Attack
SSH
Hacking
🇺🇸
mnsf
2026-08-28 15:05:20
(2 days ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇿🇦
conure.sh
2026-08-28 12:14:34
(2 days ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 11:59:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.134.223.232 (232.223.134.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.134.223.232 (232.223.134.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 07:59:45.217372 2026] [security2:error] [pid 2077:tid 2077] [client 34.134.223.232:34822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hesterpark.braunfamily.info"] [uri "/.env.dev"] [unique_id "apF4MfEmjDdWttJyWafnbwAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-08-28 11:38:47
(3 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-08-28 11:03:14
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇸🇪
vaia.cloud
2026-08-28 10:50:04
(3 days ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 10:10:41
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.134.223.232 (232.223.134.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.134.223.232 (232.223.134.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 06:10:34.563376 2026] [security2:error] [pid 21226:tid 21226] [client 34.134.223.232:44846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.georgelaceysales.glslightingandcontrols.com"] [uri "/.env.dev"] [unique_id "apFemsuXQ1bzcsWst39hBwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-08-27 21:40:41
(3 days ago)
Unauthorized access to webpage admin
Web App Attack
🇳🇱
i-turnradio.nl
2026-08-27 21:20:10
(3 days ago)
2026-08-27 @ 23:20:10 (CET) ~ Blocked for trying to access: /wp-config.php~
Web App Attack
🇺🇸
creechy
2026-08-27 20:06:54
(3 days ago)
34.134.223.232 - - [27/Aug/2026:13:06:48 -0700] "GET /wp-config.php.bak HTTP/1.1" 404 769
...
Hacking
Bad Web Bot
🇩🇪
big-cloud.nl
2026-08-27 19:48:21
(3 days ago)
Try to access /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 19:12:40
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.134.223.232 (232.223.134.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.134.223.232 (232.223.134.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 15:12:34.465692 2026] [security2:error] [pid 3364193:tid 3364217] [client 34.134.223.232:39380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fandgins.antidote-it.com"] [uri "/.env.save"] [unique_id "apCMImFrw0a5QvBUUd_a7wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 18:29:20
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.134.223.232 (232.223.134.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.134.223.232 (232.223.134.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 14:29:16.836047 2026] [security2:error] [pid 7543:tid 7543] [client 34.134.223.232:43278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elessenux.com"] [uri "/.env.local"] [unique_id "apCB_BEReoYIBBJuepP3pwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-08-27 17:54:59
(3 days ago)
URL Probing: /wp-config.php~
Web App Attack