🇬🇧
thetomtaylor.co.uk
2026-09-03 01:07:02
(2 days ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 01:03:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.162.145.251 (251.145.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.145.251 (251.145.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 21:03:44.937542 2026] [security2:error] [pid 14033:tid 14033] [client 34.162.145.251:63268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fastquizmaker.com"] [uri "/.env"] [unique_id "apjHcHkPzO7M-DTyoq9J1QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
GabrielJST
2026-09-03 00:36:10
(2 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.162.145.251 (US/U ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.162.145.251 (US/United States/251.145.162.34.bc.googleusercontent.com)
show less
Bad Web Bot
Anonymous
2026-09-03 00:35:02
(2 days ago)
suspicious request in access.log
Web App Attack
🇳🇴
jad-abuse
2026-09-03 00:30:54
(2 days ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe. Observed by 1 sensor(s); 1 hits.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 00:26:11
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.162.145.251 (251.145.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.145.251 (251.145.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 20:26:03.706594 2026] [security2:error] [pid 10658:tid 10658] [client 34.162.145.251:62368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "extreme-atv.com"] [uri "/.env"] [unique_id "api-m9N0A-Q4xjL_Jq9O6gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-09-03 00:13:58
(2 days ago)
[ThuSep0302:13:52.3635382026][security2:error][pid1811628:tid1811884][client34.162.145.251:0]ModSecu ...
show more
[ThuSep0302:13:52.3635382026][security2:error][pid1811628:tid1811884][client34.162.145.251:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"executivekotech.com\"][uri\"/.env\"][unique_id\"api7wGnGimYqI-l8dLZ8HQAAAQQ\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 00:09:10
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.162.145.251 (251.145.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.145.251 (251.145.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 20:09:05.304051 2026] [security2:error] [pid 19192:tid 19192] [client 34.162.145.251:65514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ewingmissouri.com"] [uri "/.env"] [unique_id "api6oUyhPwW-mAvBx2-bbwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 23:49:16
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.162.145.251 (251.145.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.145.251 (251.145.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 19:49:06.920852 2026] [security2:error] [pid 31089:tid 31089] [client 34.162.145.251:62090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "etudesoftware.com"] [uri "/.env"] [unique_id "api18iM8EpC3ZVZdjPmjrwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
interbiznw.com
2026-09-02 23:44:04
(2 days ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇨🇦
polycoda
2026-09-02 23:29:19
(2 days ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 23:28:26
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.162.145.251 (251.145.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.145.251 (251.145.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 19:28:21.948774 2026] [security2:error] [pid 11823:tid 11823] [client 34.162.145.251:51456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "esad.com"] [uri "/.env"] [unique_id "apixFRVTRRoeQJY48fWUYQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
alferez
2026-09-02 23:27:47
(2 days ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 23:10:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.162.145.251 (251.145.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.145.251 (251.145.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 19:10:49.623863 2026] [security2:error] [pid 31192:tid 31210] [client 34.162.145.251:63384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ep-dh.com"] [uri "/.env"] [unique_id "apis-Ygdyq0WCAX3iEIACQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-02 23:05:11
(2 days ago)
Abuse Detected (12)
Brute-Force
Web App Attack