🇿🇦
conure.sh
2026-09-01 04:57:43
(5 hours ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 1s
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-09-01 04:56:52
(5 hours ago)
[Mon Aug 31 22:56:47.102585 2026] [authz_core:error] [pid 104382:tid 140669767116352] [client 34.155 ...
show more
[Mon Aug 31 22:56:47.102585 2026] [authz_core:error] [pid 104382:tid 140669767116352] [client 34.155.100.93:59310] AH01630: client denied by server configuration: /var/www/horde/.env.bak
[Mon Aug 31 22:56:51.561902 2026] [authz_core:error] [pid 104382:tid 140667510462016] [client 34.155.100.93:59310] AH01630: client denied by server configuration: /var/www/horde/.env.dist
[Mon Aug 31 22:56:51.660873 2026] [authz_core:error] [pid 104382:tid 140669054064192] [client 34.155.100.93:59310] AH01630: client denied by server configuration: /var/www/horde/.env.swp
...
show less
Bad Web Bot
🇩🇰
HostingGroup
2026-09-01 03:21:53
(7 hours ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 7. First blocked: 2026-09-01.
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 02:25:45
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.155.100.93 (93.100.155.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.100.93 (93.100.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:25:38.932199 2026] [security2:error] [pid 31673:tid 31673] [client 34.155.100.93:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.cloudex.click"] [uri "/.env.test"] [unique_id "apY3opwJpuI7kJAxE_PRzwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-31 22:01:11
(12 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-30.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-31 13:45:28
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.155.100.93 (93.100.155.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.100.93 (93.100.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 09:45:24.245731 2026] [security2:error] [pid 1748:tid 1748] [client 34.155.100.93:51674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "automotiveforms.net"] [uri "/.git/config"] [unique_id "apWFdIQ6kAZhtPsMzMtjqgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 12:56:04
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.155.100.93 (93.100.155.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.100.93 (93.100.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:55:58.372637 2026] [security2:error] [pid 23280:tid 23280] [client 34.155.100.93:33094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "automationmp.com"] [uri "/.git/config"] [unique_id "apV53jysnLUnASZGebPHmwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇹
René Hickersberger
2026-08-31 12:44:28
(21 hours ago)
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 12:09:45
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.155.100.93 (93.100.155.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.100.93 (93.100.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:09:40.443145 2026] [security2:error] [pid 15828:tid 15828] [client 34.155.100.93:53114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "automatebi.com"] [uri "/.git/config"] [unique_id "apVvBCyXzOp5HMxyMY6j-QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-08-31 11:50:49
(22 hours ago)
(modsecurity) srv102 ModSecurity 34.155.100.93 (FR/France/93.100.155.34.bc.googleusercontent.com): 3 ...
show more
(modsecurity) srv102 ModSecurity 34.155.100.93 (FR/France/93.100.155.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇨🇦
john doe
2026-08-31 11:11:24
(23 hours ago)
SentinelBot: Secret-path hunting (5 distinct paths): Env File Hunting (score: 67)
Bad Web Bot
🇩🇪
itsolon
2026-08-31 10:27:02
(1 day ago)
[31/Aug/2026:12:27:02 +0200] 178817202244.656000 34.155.100.93 0 217.154.7.177 443
[31/Aug/2026:12:2 ...
show more
[31/Aug/2026:12:27:02 +0200] 178817202244.656000 34.155.100.93 0 217.154.7.177 443
[31/Aug/2026:12:27:02 +0200] 178817202234.315196 34.155.100.93 0 217.154.7.177 443
[31/Aug/2026:12:27:02 +0200] 178817202238.537530 34.155.100.93 0 217.154.7.177 443
[31/Aug/2026:12:27:02 +0200] 178817202212.333277 34.155.100.93 0 217.154.7.177 443
[31/Aug/2026:12:27:02 +0200] 178817202228.467073 34.155.100.93 0 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
🇩🇪
big-cloud.nl
2026-08-31 10:26:59
(1 day ago)
Try to access /.git/config
Web App Attack
🇫🇷
masterguru
2026-08-31 10:06:26
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
2026-08-31 03:57:08
(1 day ago)
Multiple web server 400 error codes from same source ip
Web App Attack