🇷🇺
ago.su
2026-09-07 08:20:00
(3 days ago)
F2B blocked nginx activity control ddos v1 [otd]
DDoS Attack
Anonymous
2026-09-06 04:05:08
(4 days ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
Anonymous
2026-09-06 03:10:02
(4 days ago)
suspicious request in access.log
Web App Attack
🇱🇻
garmtech.com
2026-09-06 02:58:23
(4 days ago)
Attempted access to sensitive endpoint (/.env.production) detected. Automated scan or unauthorized p ...
show more
Attempted access to sensitive endpoint (/.env.production) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 02:55:02
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.152.51.219 (219.51.152.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.152.51.219 (219.51.152.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:54:57.805910 2026] [security2:error] [pid 25818:tid 25818] [client 34.152.51.219:35560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "owengmail.com"] [uri "/.env.save"] [unique_id "apzWAbPEBxiC0LhMWalyLQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 02:28:38
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.152.51.219 (219.51.152.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.152.51.219 (219.51.152.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:28:30.727262 2026] [security2:error] [pid 24529:tid 24529] [client 34.152.51.219:45974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sloaviation.com.inetbrain.com"] [uri "/.env.local"] [unique_id "apzPztcrW6eQG7CW3QTdJAAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 00:48:23
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.152.51.219 (219.51.152.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.152.51.219 (219.51.152.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 20:48:19.648634 2026] [security2:error] [pid 10561:tid 10561] [client 34.152.51.219:38012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.electric-cosmos.com"] [uri "/wp-config.php~"] [unique_id "apy4U1STHU-el5SIPCMtCQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-09-06 00:23:40
(4 days ago)
Blocked by ConnMonitor
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 00:20:08
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.152.51.219 (219.51.152.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.152.51.219 (219.51.152.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 20:20:03.132818 2026] [security2:error] [pid 32118:tid 32118] [client 34.152.51.219:53548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andiamocomputers.com"] [uri "/.env.example"] [unique_id "apyxsy1Q7n5kRZvBE4uUqgAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-06 00:05:57
(4 days ago)
Abuse Detected (2)
Brute-Force
Web App Attack
🇩🇪
Philister11
2026-09-06 00:00:18
(4 days ago)
CrowdSec: crowdsecurity/http-probing (CA/AS396982)
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-05 23:57:00
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.152.51.219 (219.51.152.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.152.51.219 (219.51.152.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 19:56:55.013429 2026] [security2:error] [pid 21464:tid 21464] [client 34.152.51.219:57646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.kochcreative.com"] [uri "/.env.local"] [unique_id "apysR1BpAiqHaNW2sD6YlAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-05 23:30:21
(4 days ago)
(mod_security) mod_security (id:949110) triggered by 34.152.51.219 (CA/Canada/219.51.152.34.bc.googl ...
show more
(mod_security) mod_security (id:949110) triggered by 34.152.51.219 (CA/Canada/219.51.152.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 22:50:39
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.152.51.219 (219.51.152.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.152.51.219 (219.51.152.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:50:35.488649 2026] [security2:error] [pid 22794:tid 22794] [client 34.152.51.219:57146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "diarrheawolves.com"] [uri "/.env.bak"] [unique_id "apycu_50GXvL8UyAy9L6-gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇬
HighWay
2026-09-05 22:29:28
(4 days ago)
34.152.51.219 - - [05/Sep/2026:22:29:26 +0000] "GET /.env.backup HTTP/1.1" 403 5579 "-" "crusader-wo ...
show more
34.152.51.219 - - [05/Sep/2026:22:29:26 +0000] "GET /.env.backup HTTP/1.1" 403 5579 "-" "crusader-worker/1.0"
34.152.51.219 - - [05/Sep/2026:22:29:26 +0000] "GET /.env.prod HTTP/1.1" 403 5579 "-" "crusader-worker/1.0"
34.152.51.219 - - [05/Sep/2026:22:29:26 +0000] "GET /.env.local HTTP/1.1" 403 5579 "-" "crusader-worker/1.0"
...
show less
Port Scan
Bad Web Bot
Web App Attack