๐ฉ๐ช
YF
2026-09-04 00:00:23
(24 minutes ago)
Distributed subnet attack โ coordinated scanning from multiple IPs in the same /24
DDoS Attack
Web App Attack
๐บ๐ธ
Starburst SysOp Team
2026-09-03 23:59:28
(25 minutes ago)
BAD BOT, BAD BOT, WHAT YA GONNA DO - Detected and Blocked.. Matched phrase "ClaudeBot" at REQUEST_HE ...
show more
BAD BOT, BAD BOT, WHAT YA GONNA DO - Detected and Blocked.. Matched phrase "ClaudeBot" at REQUEST_HEADERS:User-Agent. (1100000-mnz6-1)
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-03 23:53:17
(31 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.140.131.163 (163.131.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.131.163 (163.131.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 19:53:13.429096 2026] [security2:error] [pid 28655:tid 28655] [client 34.140.131.163:32974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soulybygrace.com"] [uri "/@fs/.env"] [unique_id "apoIadJ6Cv2h3SjWE6LTMQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฟ
Antinson
2026-09-03 23:42:05
(43 minutes ago)
Scraping with a high error ratio and request rate
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-03 23:16:29
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.140.131.163 (163.131.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.131.163 (163.131.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 19:16:25.654468 2026] [security2:error] [pid 2936:tid 2936] [client 34.140.131.163:45744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.internationalchristmascards.com"] [uri "/@fs/root/.env"] [unique_id "apn_ydEUimv8C43_1Ybj3gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
debestelapp
2026-09-03 23:15:13
(1 hour ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 22:57:00
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.140.131.163 (163.131.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.131.163 (163.131.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:56:52.349320 2026] [security2:error] [pid 5962:tid 5962] [client 34.140.131.163:33614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.vicmackenzie.com"] [uri "/@fs/app/.env"] [unique_id "apn7NHb2mDeJlu5bIjffPgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 22:19:01
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.140.131.163 (163.131.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.131.163 (163.131.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:18:54.969482 2026] [security2:error] [pid 2134:tid 2134] [client 34.140.131.163:33050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.danzadance.org"] [uri "/@fs/.env"] [unique_id "apnyThrkOuOkOs_1AIL7rQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐พ
lns.bz
2026-09-03 22:03:02
(2 hours ago)
Too many 404 requests [BY]
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 21:52:02
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.140.131.163 (163.131.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.131.163 (163.131.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:51:54.450321 2026] [security2:error] [pid 11369:tid 11369] [client 34.140.131.163:58914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jbernsteinpc.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252froot/.env"] [unique_id "apnr-i9HHNu1CnpaPOnUhQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 21:20:31
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.140.131.163 (163.131.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.131.163 (163.131.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:20:28.033097 2026] [security2:error] [pid 30660:tid 30660] [client 34.140.131.163:5646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.itaxcenter.com"] [uri "/@fs/.env"] [unique_id "apnknIBB8_Gg7gi15whmSQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
WebNiraj
2026-09-03 21:16:31
(3 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.140.131.163 (BE/Belgium/163.131.140.34.bc.go ...
show more
(mod_security) mod_security (id:949110) triggered by 34.140.131.163 (BE/Belgium/163.131.140.34.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
show less
Brute-Force
๐ซ๐ท
Octopuce
2026-09-03 20:16:08
(4 hours ago)
Aggressive web search of vulnerable pages: /.env.local /img../.env /assets../.env /images../.env /.e ...
show more
Aggressive web search of vulnerable pages: /.env.local /img../.env /assets../.env /images../.env /.env ...
show less
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-03 20:13:56
(4 hours ago)
cloudlinux2 fail2ban: 2026-09-03 22:09:22,594 fail2ban.actions [1472]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-03 22:09:22,594 fail2ban.actions [1472]: NOTICE [plesk-modsecurity] Unban 195.178.110.22cloudlinux2 fail2ban: 2026-09-03 22:09:39,553 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 172.98.33.7 - 2026-09-03 22:09:38cloudlinux2 fail2ban: 2026-09-03 22:11:11,231 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 136.108.44.83 - 2026-09-03 22:11:11cloudlinux2 fail2ban: 2026-09-03 22:11:59,363 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 34.140.131.163 - 2026-09-03 22:11:59cloudlinux2 fail2ban: 2026-09-03 22:11:59,413 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 34.140.131.163 - 2026-09-03 22:11:59cloudlinux2 fail2ban: 2026-09-03 22:11:59,461 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 34.140.131.163 - 2026-09-03 22:11:59cloudlinux2 fail2ban: 2026-09-03 22:11:59,478 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 34.140.131.163 - 2026-09-03 22:11:59cloudlinux2 fail
show less
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-03 20:11:03
(4 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack