🇿🇦
conure.sh
2026-11-13 12:07:47
UTC ·
(19 hours ago)
csagent: score 20.0: wp-config backup grab x1, secrets grab x1; 1 domain(s) in 3s
Web App Attack
🇳🇱
Site.eu
2026-11-13 02:51:29
UTC ·
(1 day ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 02:28:58
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.147.10.147 (147.10.147.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:28:53.501752 2026] [security2:error] [pid 29190:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.147.10.147 (147.10.147.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:28:53.501752 2026] [security2:error] [pid 29190:tid 29190] [client 34.147.10.147:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.grainavi.com"] [uri "/apps/api/.env"] [unique_id "avZ15e-4xPrNixhXv6AGGAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 02:05:04
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.147.10.147 (147.10.147.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:04:55.447050 2026] [security2:error] [pid 31435:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.147.10.147 (147.10.147.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:04:55.447050 2026] [security2:error] [pid 31435:tid 31456] [client 34.147.10.147:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.grandmasgentlesteps.com"] [uri "/apps/web/.env"] [unique_id "avZwR4ZmbCzuqskiLZ0JEQAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-13 02:05:02
UTC ·
(1 day ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇿🇦
conure.sh
2026-11-13 00:08:43
UTC ·
(1 day ago)
csagent: score 20.0: secrets grab x1, wp-config backup grab x1; 1 domain(s) in 3s
Web App Attack
🇫🇷
dynamix
2026-11-13 00:01:59
UTC ·
(1 day ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-11-12 23:00:28
UTC ·
(1 day ago)
Aggressive web scan
Web App Attack
🇺🇸
GFETALLOW
2026-11-12 21:35:07
UTC ·
(1 day ago)
grassfedessentials.com: 25 automated attack request(s) caught by honeypot/scanner traps. 2026-11-12T21:35:03.722Z /actuator/loggers | 2026-11-12T21:35:04.603Z /public../.env | 2026-11-12T21:35:04.614Z /js../.env | 2026-11-12T21:35:04.813Z /wp/.env | ...
show more
grassfedessentials.com: 25 automated attack request(s) caught by honeypot/scanner traps. 2026-11-12T21:35:03.722Z /actuator/loggers | 2026-11-12T21:35:04.603Z /public../.env | 2026-11-12T21:35:04.614Z /js../.env | 2026-11-12T21:35:04.813Z /wp/.env | 2026-11-12T21:35:07.316Z /..../..../..../..../proc/self/environ UA: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
show less
Web App Attack
Bad Web Bot
Hacking
SQL Injection
🇮🇹
VHosting
2026-11-12 20:40:04
UTC ·
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
IndigoRidge
2026-11-12 20:39:51
UTC ·
(1 day ago)
[Thu Nov 12 15:39:50.120743 2026] [authz_core:error] [pid 973902:tid 140230338111232] [client 34.147.10.147:0] AH01630: client denied by server configuration: /var/www/vhosts/gostonemortgage.com/error_docs/forbidden.html
[Thu Nov 12 15:39:50.615396 2 ...
show more
[Thu Nov 12 15:39:50.120743 2026] [authz_core:error] [pid 973902:tid 140230338111232] [client 34.147.10.147:0] AH01630: client denied by server configuration: /var/www/vhosts/gostonemortgage.com/error_docs/forbidden.html
[Thu Nov 12 15:39:50.615396 2026] [authz_core:error] [pid 974127:tid 140228920596224] [client 34.147.10.147:0] AH01630: client denied by server configuration: /var/www/vhosts/gostonemortgage.com/httpdocs/frontend
[Thu Nov 12 15:39:50.615483 2026] [authz_core:error] [pid 974127:tid 140228920596224] [client 34.147.10.147:0] AH01630: client denied by server configuration: /var/www/vhosts/gostonemortgage.com/error_docs/forbidden.html
[Thu Nov 12 15:39:50.632780 2026] [authz_core:error] [pid 973902:tid 140229172246272] [client 34.147.10.147:0] AH01630: client denied by server configuration: /var/www/vhosts/gostonemortgage.com/httpdocs/web
[Thu Nov 12 15:39:50.632826 2026] [authz_core:error] [pid 973902:tid 140229172246272] [client 34.147.10.147:0] AH01630: client denied by
...
show less
Web App Attack