🇫🇷
SpaceHost-Server
2026-09-02 22:22:18
UTC ·
(2 months ago)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-01 22:21:44
UTC ·
(2 months ago)
Brute-Force
Web App Attack
🇩🇪
tentwentyfour
2026-09-01 05:25:22
UTC ·
(2 months ago)
Blocked for probing for sensitive web application components
Brute-Force
Web App Attack
🇲🇾
Rizzy
2026-09-01 05:11:22
UTC ·
(2 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
webanyone
2026-09-01 05:01:47
UTC ·
(2 months ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 04:32:51
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.175.185.83 (83.185.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:32:47.516889 2026] [security2:error] [pid 18571:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.185.83 (83.185.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:32:47.516889 2026] [security2:error] [pid 18571:tid 18571] [client 34.175.185.83:34378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baselinesc.com"] [uri "/.env.save"] [unique_id "apZVb0QhzENC-GoBBMSCiAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-01 04:05:04
UTC ·
(2 months ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 03:18:12
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.175.185.83 (83.185.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 23:18:04.217176 2026] [security2:error] [pid 11548:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.185.83 (83.185.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 23:18:04.217176 2026] [security2:error] [pid 11548:tid 11548] [client 34.175.185.83:51288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ohiobabe.com"] [uri "/wp-config.php.bak"] [unique_id "apZD7BFN0uevQvN_7ZFmPgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-01 02:55:43
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-01 02:53:03
UTC ·
(2 months ago)
[01/Sep/2026:05:53:02 +0300] -- 34.175.185.83 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.save HTTP/1.1
Bad Web Bot
Web App Attack
🇩🇪
DyhnenTv
2026-09-01 02:45:10
UTC ·
(2 months ago)
CrowdSec webserver: crowdsecurity/http-probing
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-01 02:38:36
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.175.185.83 (83.185.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:38:31.477623 2026] [security2:error] [pid 8792:tid 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.185.83 (83.185.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:38:31.477623 2026] [security2:error] [pid 8792:tid 8792] [client 34.175.185.83:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mail-pmg.com"] [uri "/.env.production"] [unique_id "apY6pyyE6fVZeYniHcrZ_AAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-09-01 02:34:23
UTC ·
(2 months ago)
[Mon Aug 31 20:34:22.506951 2026] [authz_core:error] [pid 104381:tid 140668693374528] [client 34.175.185.83:59182] AH01630: client denied by server configuration: /var/www/horde/.env.bak
[Mon Aug 31 20:34:22.516412 2026] [authz_core:error] [pid 10464 ...
show more
[Mon Aug 31 20:34:22.506951 2026] [authz_core:error] [pid 104381:tid 140668693374528] [client 34.175.185.83:59182] AH01630: client denied by server configuration: /var/www/horde/.env.bak
[Mon Aug 31 20:34:22.516412 2026] [authz_core:error] [pid 104648:tid 140668693374528] [client 34.175.185.83:59240] AH01630: client denied by server configuration: /var/www/horde/wp-config.php~
[Mon Aug 31 20:34:22.519785 2026] [authz_core:error] [pid 104648:tid 140668164896320] [client 34.175.185.83:59226] AH01630: client denied by server configuration: /var/www/horde/wp-config.php.bak
...
show less
Bad Web Bot
🇬🇧
Aetherweb Ark
2026-09-01 01:45:33
UTC ·
(2 months ago)
(mod_security) mod_security (id:949110) triggered by 34.175.185.83 (ES/Spain/83.185.175.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇩🇪
LRob
2026-09-01 01:22:55
UTC ·
(2 months ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.env (+10 more) | 2026-09-01 01:22 UTC
Hacking
Web App Attack