🇧🇪
taivas.nl
2026-09-09 04:33:22
(20 hours ago)
Many_bad_calls
Web App Attack
🇺🇸
mw
2026-09-09 01:41:36
(23 hours ago)
Web App Attack
Web App Attack
🇮🇳
evicky2002
2026-09-09 00:01:20
(1 day ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
2026-09-08 10:56:12
(1 day ago)
Bot / seems abusive / Apache connections: 60
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-09-08 09:08:58
(1 day ago)
cloudlinux2 fail2ban: 2026-09-08 11:03:58,220 fail2ban.filter [1794]: INFO [plesk-proftpd ...
show more
cloudlinux2 fail2ban: 2026-09-08 11:03:58,220 fail2ban.filter [1794]: INFO [plesk-proftpd] Found 116.203.204.77 - 2026-09-08 11:03:58cloudlinux2 fail2ban: 2026-09-08 11:04:01,473 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 76.185.72.148 - 2026-09-08 11:04:00cloudlinux2 fail2ban: 2026-09-08 11:05:32,015 fail2ban.actions [1794]: NOTICE [plesk-modsecurity] Unban 175.157.105.180cloudlinux2 fail2ban: 2026-09-08 11:06:11,278 fail2ban.actions [1794]: NOTICE [plesk-modsecurity] Ban 34.131.105.29cloudlinux2 fail2ban: 2026-09-08 11:06:11,244 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 34.131.105.29 - 2026-09-08 11:06:11cloudlinux2 fail2ban: 2026-09-08 11:06:11,027 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 34.131.105.29 - 2026-09-08 11:06:11cloudlinux2 fail2ban: 2026-09-08 11:06:11,284 fail2ban.filter [1794]: INFO [recidive] Found 34.131.105.29 - 2026-09-08 11:06:11cloudlinux2 fail2ban: 2026-09-08 11:06:10,215 fail2ba
show less
FTP Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 09:08:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.16.230.247 (247.230.16.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.230.247 (247.230.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 05:08:25.932528 2026] [security2:error] [pid 4030:tid 4030] [client 34.16.230.247:16934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.asiancommoditiescorporation.com"] [uri "/@fs/.env"] [unique_id "ap_QiUZz397QGhrLUjjDxAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
raph
2026-09-08 08:51:48
(1 day ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-09-08 08:22:20
(1 day ago)
Automatically blocked due to distributed attack
Hacking
🇺🇸
TPI-Abuse
2026-09-08 07:45:25
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.16.230.247 (247.230.16.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.230.247 (247.230.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 03:45:18.789474 2026] [security2:error] [pid 17519:tid 17519] [client 34.16.230.247:10662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "linearconceptsllc.com"] [uri "/@fs/.env"] [unique_id "ap-9Dm9uUkb0SaRKyDbJvQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 07:25:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.16.230.247 (247.230.16.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.230.247 (247.230.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 03:25:37.315578 2026] [security2:error] [pid 9789:tid 9789] [client 34.16.230.247:25844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.learnserve.net"] [uri "/@fs/.env"] [unique_id "ap-4cSblgBvt4hSemslncAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-08 07:05:36
(1 day ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2026-09-08 06:52:40
(1 day ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 06:47:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.16.230.247 (247.230.16.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.230.247 (247.230.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 02:47:03.169516 2026] [security2:error] [pid 23585:tid 23585] [client 34.16.230.247:52182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.tropicallabs.com"] [uri "/@fs/.env"] [unique_id "ap-vZx8OHByzUyVf8soQVgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-09-08 06:30:58
(1 day ago)
[TueSep0808:30:53.8048282026][security2:error][pid438944:tid439050][client34.16.230.247:0]ModSecurit ...
show more
[TueSep0808:30:53.8048282026][security2:error][pid438944:tid439050][client34.16.230.247:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"mail.aid-consultancy.ch\"][uri\"/@fs/.env.production\"][unique_id\"ap-rnXJkZz0ePGxiSeL4aQAAARg\"]
show less
Hacking
Web App Attack
Anonymous
2026-09-08 06:21:30
(1 day ago)
http scanning for .env files
...
Hacking
Web App Attack