๐ณ๐ฑ
homeshowdomain.nl
2026-06-16 22:02:39
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-15.
show less
Web App Attack
SSH
Hacking
๐ณ๐ฑ
Savvii
2026-06-15 16:30:03
(4 days ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-15 13:56:59
(4 days ago)
(CT) IP 34.138.100.4 (US/United States/4.100.138.34.bc.googleusercontent.com) found to have 608 conn ...
show more
(CT) IP 34.138.100.4 (US/United States/4.100.138.34.bc.googleusercontent.com) found to have 608 connections
show less
DDoS Attack
๐ซ๐ฎ
YF
2026-06-15 10:00:57
(4 days ago)
Environment file probe
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 09:48:00
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.138.100.4 (4.100.138.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.138.100.4 (4.100.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:47:57.576144 2026] [security2:error] [pid 1484:tid 1506] [client 34.138.100.4:50552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pizzadlux.com"] [uri "/api/.env.local"] [unique_id "ai_KTZcn6-uWSuslAVJlYwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-06-15 05:05:09
(4 days ago)
Scanning/Probing (46)
Brute-Force
Web App Attack
๐ณ๐ฑ
Cloud86 B.V.
2026-06-15 03:13:05
(4 days ago)
categories: DDoS Attack
DDoS Attack
๐ซ๐ท
โจ
2026-06-15 02:00:28
(4 days ago)
Domain : itrap.co.uk
Rule : env
2026-06-15 01:59:42 W3SVC29 PLESK76 217.194.212.102 GET /development ...
show more
Domain : itrap.co.uk
Rule : env
2026-06-15 01:59:42 W3SVC29 PLESK76 217.194.212.102 GET /development/.env - 443 - 34.138.100.4 HTTP/1.1 AndroidDownloadManager/5.1 (Linux; U; Android 5.1; Z820 Build/LMY47D) - - www.ifra.itrap.co.uk 404 0 0 3221 210 5533 - -
show less
Hacking
SQL Injection
๐ณ๐ฑ
e.fierstra
2026-06-14 22:23:49
(4 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-06-14 07:15:09
(5 days ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-196)
show less
Hacking
Anonymous
2026-06-14 05:42:30
(5 days ago)
Multiple web server 400 error codes from same source ip
Web App Attack
๐ฎ๐น
VHosting
2026-06-14 04:55:03
(5 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 04:35:24
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.138.100.4 (4.100.138.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.138.100.4 (4.100.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 00:35:19.273059 2026] [security2:error] [pid 24570:tid 24570] [client 34.138.100.4:39496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lawson-insurance.com"] [uri "/.env.production"] [unique_id "ai4vh34UQz4WxF2O49g8LQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-06-14 02:06:14
(5 days ago)
Too many Status 40X (98)
Scanning/Probing (114)
Request Overload (119)
Brute-Force
Web App Attack
๐ฏ๐ต
nhawsjones
2026-06-13 22:31:17
(5 days ago)
34.138.100.4 - - [14/Jun/2026:07:31:16 +0900] "GET /api/.env.staging HTTP/1.1" 404 3050 "-" "EmailWo ...
show more
34.138.100.4 - - [14/Jun/2026:07:31:16 +0900] "GET /api/.env.staging HTTP/1.1" 404 3050 "-" "EmailWolf 1.00"
...
show less
Brute-Force