๐ฟ๐ฆ
conure.sh
2026-10-13 12:14:01
(5 hours ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 2 domain(s) in -1s
Web App Attack
๐บ๐ธ
wbsouza
2026-10-13 03:38:03
(14 hours ago)
CrowdSec: infra/bad-path-probe โ automated firewall drops on self-hosted IDS sensor
Hacking
๐บ๐ธ
billfor
2026-10-13 02:47:30
(15 hours ago)
34.162.142.136 - - [12/Oct/2026:22:47:27 -0400] "GET /.env HTTP/1.1" 404 9003 "-" "python-requests/2 ...
show more
34.162.142.136 - - [12/Oct/2026:22:47:27 -0400] "GET /.env HTTP/1.1" 404 9003 "-" "python-requests/2.34.2"
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 00:45:42
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.162.142.136 (136.142.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.142.136 (136.142.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 20:45:37.578695 2026] [security2:error] [pid 20460:tid 20460] [client 34.162.142.136:59358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doreenkimura.com"] [uri "/.env"] [unique_id "as1_MfVrGJ9wK1wqQLslVAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-10-13 00:23:56
(17 hours ago)
cloudlinux2 fail2ban: 2026-10-13 02:18:53,538 fail2ban.actions [1878]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-10-13 02:18:53,538 fail2ban.actions [1878]: NOTICE [plesk-modsecurity] Unban 89.146.186.48cloudlinux2 fail2ban: 2026-10-13 02:19:55,443 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 173.239.240.46 - 2026-10-13 02:19:53cloudlinux2 fail2ban: 2026-10-13 02:19:55,539 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 173.239.240.51 - 2026-10-13 02:19:53cloudlinux2 fail2ban: 2026-10-13 02:19:59,193 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 173.239.240.51 - 2026-10-13 02:19:58cloudlinux2 fail2ban: 2026-10-13 02:21:25,504 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 34.162.142.136 - 2026-10-13 02:21:24cloudlinux2 fail2ban: 2026-10-13 02:21:36,142 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 146.190.248.30 - 2026-10-13 02:21:36cloudlinux2 fail2ban: 2026-10-13 02:21:36,127 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 146.190.248.30 - 2026-10-13 02:21:36cloudlinux2 fail2
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 00:14:35
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.162.142.136 (136.142.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.142.136 (136.142.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 20:14:30.143293 2026] [security2:error] [pid 15247:tid 15247] [client 34.162.142.136:52260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doctorbalog.com"] [uri "/.env"] [unique_id "as135meVxz8VzXtWAsJItAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-10-13 00:01:53
(17 hours ago)
[Tue Oct 13 11:01:51.605042 2026] [security2:error] [pid 170259] [client 34.162.142.136:62666] [clie ...
show more
[Tue Oct 13 11:01:51.605042 2026] [security2:error] [pid 170259] [client 34.162.142.136:62666] [client 34.162.142.136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dlcarterauthor.com"] [uri "/.env"] [unique_id "as1071YX5oWyn72THqrxBgAAAA0"]
...
show less
Web App Attack
Anonymous
2026-10-12 23:53:29
(17 hours ago)
fail2ban jail apache-secrets-probe: 34.162.142.136 - - [12/Oct/2026:16:53:27 -0700] "GET /.env HTTP/ ...
show more
fail2ban jail apache-secrets-probe: 34.162.142.136 - - [12/Oct/2026:16:53:27 -0700] "GET /.env HTTP/1.1" 301 588 "-" "python-requests/2.34.2"
show less
Web App Attack
๐ฌ๐ง
Bytemark
2026-10-12 23:44:02
(18 hours ago)
34.162.142.136 - - [13/Oct/2026:00:44:01 +0100] "GET /.env HTTP/1.1" 301 6891 "-" "python-requests/2 ...
show more
34.162.142.136 - - [13/Oct/2026:00:44:01 +0100] "GET /.env HTTP/1.1" 301 6891 "-" "python-requests/2.34.2"
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 23:15:08
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.162.142.136 (136.142.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.142.136 (136.142.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 19:15:00.685746 2026] [security2:error] [pid 23898:tid 23898] [client 34.162.142.136:60496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ecodesarrollourbano.com"] [uri "/.env"] [unique_id "as1p9NvKW9Ta984cXzJ-XwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-10-12 23:05:31
(18 hours ago)
Abuse Detected (52)
Brute-Force
Web App Attack
๐ฉ๐ช
todix
2026-10-12 23:05:08
(18 hours ago)
"GET /.env HTTP/1.1" 301 162 "-" "python-requests/2.34.2"
Web App Attack
Anonymous
2026-10-12 22:36:44
(19 hours ago)
[da.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env
Hacking
Web App Attack
๐ณ๐ฑ
GabrielJST
2026-10-12 22:28:22
(19 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.162.142.136 (US/U ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.162.142.136 (US/United States/136.142.162.34.bc.googleusercontent.com)
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-12 22:22:47
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.162.142.136 (136.142.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.142.136 (136.142.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 18:22:39.321440 2026] [security2:error] [pid 16391:tid 16391] [client 34.162.142.136:64688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "destructionstudios.com"] [uri "/.env"] [unique_id "as1dr6M61INIp5FBlgLJjgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack