πΏπ¦
conure.sh
2026-10-13 12:14:18
(4 hours ago)
csagent: score 17.5: 404 noise floor x30, secrets grab x1; 1 domain(s) in 1s
Web App Attack
π¨π
π¨π Hosting
2026-10-13 05:10:24
(11 hours ago)
Automated WAF report: 300-400 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
π³π±
middelkoopcc
2026-10-12 21:42:01
(18 hours ago)
2026-10-12 23:40:16 GET /api/.env/public/.env [301] && 2026-10-12 23:40:16 GET /.env [301] && 2026-1 ...
show more
2026-10-12 23:40:16 GET /api/.env/public/.env [301] && 2026-10-12 23:40:16 GET /.env [301] && 2026-10-12 23:40:17 GET /static../.env [301] && 200 more within 20 minutes
show less
Web App Attack
πΊπΈ
jmr777
2026-10-12 18:00:00
(22 hours ago)
IM360 WAF: Direct access to sensitive file or dotfile||MV:/.env||RSV:8.75||T:APACHE||
Sensor:
mods ...
show more
IM360 WAF: Direct access to sensitive file or dotfile||MV:/.env||RSV:8.75||T:APACHE||
Sensor:
modsec
Rule:
77045402
Abuser:
34.179.244.243
show less
Web App Attack
πͺπΈ
robotstxt
2026-10-12 16:25:18
(23 hours ago)
34.179.244.243 - - [12/Oct/2026:16:24:54 +0000] "GET /dist../.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 ...
show more
34.179.244.243 - - [12/Oct/2026:16:24:54 +0000] "GET /dist../.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" "-" edge="34.179.244.243"
34.179.244.243 - - [12/Oct/2026:16:24:54 +0000] "GET /assets../.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" "-" edge="34.179.244.243"
34.179.244.243 - - [12/Oct/2026:16:24:54 +0000] "GET /media../.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "-" edge="34.179.244.243"
34.179.244.243 - - [12/Oct/2026:16:24:54 +0000] "GET /css../.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "-" edge="34.179.244.243"
34.179.244.243 - - [12/Oct/2026:16:24:54 +0000] "GET /static../.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "-" edge="34.179.244.243"
...
show less
Web App Attack
πΏπ¦
conure.sh
2026-10-12 15:33:04
(1 day ago)
csagent: score 17.5: 404 noise floor x30, secrets grab x1; 2 domain(s) in 1s
Web App Attack
πΊπΈ
solantex
2026-10-12 15:31:41
(1 day ago)
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or tes ...
show more
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
show less
Web App Attack
Anonymous
2026-10-12 14:15:12
(1 day ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
πΊπΈ
TPI-Abuse
2026-10-12 14:06:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.179.244.243 (243.244.179.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.244.243 (243.244.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 10:06:09.729025 2026] [security2:error] [pid 30716:tid 30716] [client 34.179.244.243:54648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "satanisdead.com"] [uri "/core/.env"] [unique_id "aszpUecrxbciYfG5wJKLogAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-12 13:35:34
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.179.244.243 (243.244.179.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.244.243 (243.244.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 09:35:27.299672 2026] [security2:error] [pid 12460:tid 12476] [client 34.179.244.243:37732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maxelon.com"] [uri "/.env.keys"] [unique_id "asziH0tBTjmH9-jENxqzTQAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
debestelapp
2026-10-12 13:15:09
(1 day ago)
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-12 13:12:42
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.179.244.243 (243.244.179.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.179.244.243 (243.244.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 09:12:35.993473 2026] [security2:error] [pid 11309:tid 11309] [client 34.179.244.243:51582] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||homehealth101.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "homehealth101.com"] [uri "/z9x8c7v6b5-debug-trigger-homehealth101.com"] [unique_id "aszcw-4UsBOGd8KmUCk5YQAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-12 13:09:20
(1 day ago)
Aggressive web scan
Web App Attack
π²πΎ
Rizzy
2026-10-12 12:51:18
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2026-10-12 12:47:20
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking