🇸🇪
vaia.cloud
2026-09-08 19:45:02
(1 day ago)
crowdsecurity/CVE-2022-26134
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 19:33:47
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.177.90.39 (39.90.177.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.177.90.39 (39.90.177.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 15:33:42.479593 2026] [security2:error] [pid 26367:tid 26367] [client 34.177.90.39:2434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.creareformis.com"] [uri "/@fs/app/.env"] [unique_id "aqBjFq1fCNXpjO_hH8iAWwAAAHc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-09-08 19:25:13
(1 day ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 18:56:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.177.90.39 (39.90.177.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.177.90.39 (39.90.177.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 14:56:24.995105 2026] [security2:error] [pid 19305:tid 19305] [client 34.177.90.39:53224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.fusteriafontane.com"] [uri "/@fs/app/.env"] [unique_id "aqBaWL9K6zVV--1XuRxOWQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-08 18:42:20
(1 day ago)
122 requests with url.path *.php.bak
Brute-Force
Bad Web Bot
🇳🇱
Site.eu
2026-09-08 18:38:39
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇬🇧
consul.to
2026-09-08 18:10:36
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 17:57:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.177.90.39 (39.90.177.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.177.90.39 (39.90.177.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 13:57:03.815242 2026] [security2:error] [pid 20331:tid 20331] [client 34.177.90.39:10274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.godplusus.com"] [uri "/@fs/.env"] [unique_id "aqBMb5ATDQSEgHbpWPgFeAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-08 17:29:38
(1 day ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dbmwebdesign
2026-09-08 17:25:14
(1 day ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 17:14:37
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.177.90.39 (39.90.177.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.177.90.39 (39.90.177.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 13:14:33.103691 2026] [security2:error] [pid 2601:tid 2601] [client 34.177.90.39:49624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.seoanalyticslocal.com"] [uri "/@fs/root/.env"] [unique_id "aqBCefFbm4ju4LR7Re60sgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-08 17:01:00
(1 day ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 16:35:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.177.90.39 (39.90.177.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.177.90.39 (39.90.177.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 12:35:02.869968 2026] [security2:error] [pid 9987:tid 9987] [client 34.177.90.39:31960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.robbieburnsnight.com"] [uri "/@fs/../.env"] [unique_id "aqA5NjuSa3OcEOYT8OaYYAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bescared
2026-09-08 16:18:00
(1 day ago)
WAF (2)
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-08 16:06:20
(1 day ago)
Excessive 404/403 errors
Brute-Force