🇩🇪
paissangroup
2026-09-04 10:11:38
(36 minutes ago)
Multiple WAF Violations
Web App Attack
🇬🇧
Apache
2026-09-04 10:00:27
(47 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (BR/Brazil/103.230.151.34.bc.goo ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (BR/Brazil/103.230.151.34.bc.googleusercontent.com): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
🇧🇾
lns.bz
2026-09-03 10:08:42
(1 day ago)
Too many 404 requests [BY]
Web App Attack
🇬🇧
openstrike.co.uk
2026-09-02 05:13:25
(2 days ago)
13 attacks on env grabbing URLs, PHP URLs:
GET /.env.prod HTTP/1.1
GET /wp-config.php.bak HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 13:49:19
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (103.230.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (103.230.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:49:13.398589 2026] [security2:error] [pid 28803:tid 28803] [client 34.151.230.103:50986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wisdomwfm.com"] [uri "/.env.dev"] [unique_id "apbX2bq2wFBeLYti9TbwuQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ddobko
2026-09-01 13:01:47
(2 days ago)
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-01 12:37:05
(2 days ago)
Attempt to access a backup or working file. Pattern match "\\\\. (920500-201)
Hacking
🇺🇸
TPI-Abuse
2026-09-01 12:28:42
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (103.230.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (103.230.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:28:37.413439 2026] [security2:error] [pid 27616:tid 27616] [client 34.151.230.103:35532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "capestfrancistransfers.jbaycabs.com"] [uri "/.env.old"] [unique_id "apbE9fqb-bLYnsGHai3dnwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-09-01 12:14:40
(2 days ago)
Login credentials theft attempt
Hacking
🇬🇧
consul.to
2026-09-01 12:14:09
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
wlt-blocker
2026-09-01 12:08:16
(2 days ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 12:03:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (103.230.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (103.230.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:03:48.826628 2026] [security2:error] [pid 19561:tid 19561] [client 34.151.230.103:59386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "denvercitymotorparts.com"] [uri "/wp-config.php.bak"] [unique_id "apa_JCVHSjcBc29hknOFwQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 11:07:15
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (103.230.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (103.230.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:07:08.374154 2026] [security2:error] [pid 20376:tid 20376] [client 34.151.230.103:41030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "watersideaccommodation.com"] [uri "/.env.dev"] [unique_id "apax3OOQN2CzPUvDfJYG1wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 10:05:14
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (103.230.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (103.230.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:05:05.200011 2026] [security2:error] [pid 3322:tid 3322] [client 34.151.230.103:40942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unclemaomao.org"] [uri "/.env.bak"] [unique_id "apajUbZGFKUxT39kye09iQAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 09:30:43
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (103.230.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.230.103 (103.230.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:30:39.063520 2026] [security2:error] [pid 17620:tid 17620] [client 34.151.230.103:38602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "concreting.net"] [uri "/.env.prod"] [unique_id "apabP1_Md50QTcamu4NqawAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack