🇺🇸
TPI-Abuse
2026-09-08 10:16:39
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.153.215.64 (64.215.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.215.64 (64.215.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 06:16:33.754794 2026] [security2:error] [pid 17263:tid 17263] [client 34.153.215.64:28002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web233.dnchosting.com"] [uri "/@fs/.env"] [unique_id "ap_ggZVvzb5bfk8RiZgcPQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-09-08 09:46:10
(1 day ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇳🇱
Mangelot Hosting
2026-09-08 09:26:55
(1 day ago)
(modsecurity) srv103 ModSecurity 34.153.215.64 (JP/Japan/64.215.153.34.bc.googleusercontent.com): 30 ...
show more
(modsecurity) srv103 ModSecurity 34.153.215.64 (JP/Japan/64.215.153.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇵🇱
strefapi_com
2026-09-08 09:10:47
(1 day ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
Anonymous
2026-09-08 09:08:12
(1 day ago)
Bot / seems abusive / Apache connections: 61
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-08 09:05:21
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-08 08:56:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.153.215.64 (64.215.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.215.64 (64.215.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 04:56:00.029681 2026] [security2:error] [pid 14224:tid 14224] [client 34.153.215.64:32344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "couturebikini.com"] [uri "/@fs/.env"] [unique_id "ap_NoDegBWObc7kMBmD_hAAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 08:32:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.153.215.64 (64.215.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.215.64 (64.215.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 04:32:35.180077 2026] [security2:error] [pid 30078:tid 30078] [client 34.153.215.64:33176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.grandpont-house.org"] [uri "/@fs/.env"] [unique_id "ap_II1nVnxTAR5be3oUuNgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 07:47:43
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.153.215.64 (64.215.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.215.64 (64.215.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 03:47:36.818466 2026] [security2:error] [pid 3182844:tid 3182844] [client 34.153.215.64:2366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nmorganist.org"] [uri "/@fs/app/.env"] [unique_id "ap-9mFAQbjkGLX1Mn9YWPQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-09-08 05:56:38
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe, path_traversal, aws_creds, source_backup, ssh_keys, ai_secrets, git_exposure, config_backup. Observed by 1 sensor(s); 256 hits.
show less
Hacking
Web App Attack
Anonymous
2026-09-08 04:18:45
(1 day ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇸🇪
vaia.cloud
2026-09-08 03:55:02
(1 day ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇺🇸
TAY
2026-09-08 03:44:47
(1 day ago)
34.153.215.64 - - [08/Sep/2026:11:44:32 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2050 "-" "Mozil ...
show more
34.153.215.64 - - [08/Sep/2026:11:44:32 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)"
34.153.215.64 - - [08/Sep/2026:11:44:32 +0800] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)"
34.153.215.64 - - [08/Sep/2026:11:44:46 +0800] "GET /@fs/var/www/html/wp-config.php?raw?? HTTP/1.1" 404 2598 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.3068.174 Mobile Safari/537.36; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot"
34.153.215.64 - - [08/Sep/2026:11:44:46 +0800] "GET /@fs/../../../../../proc/self/environ?raw?? HTTP/1.1" 400 2605 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.153.215.64 - -
...
show less
Brute-Force
🇳🇱
middelkoopcc
2026-09-08 03:06:01
(1 day ago)
2026-09-08 05:04:02 AH10244: invalid URI path (/@fs/../../.env?raw??) && 2026-09-08 05:04:02 GET /@f ...
show more
2026-09-08 05:04:02 AH10244: invalid URI path (/@fs/../../.env?raw??) && 2026-09-08 05:04:02 GET /@fs/app/.env?raw?? [404] && 2026-09-08 05:04:02 GET /@fs/root/.env?raw?? [404] && 134 more within 20 minutes
show less
Web App Attack
🇬🇧
consul.to
2026-09-08 03:04:01
(1 day ago)
Web attack/malicious scanning detected
Web App Attack