๐ฉ๐ช
ghostwarriors
2026-09-22 17:20:06
(7 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ณ๐ฑ
0xffffffff
2026-09-22 16:25:07
(7 hours ago)
[2026-09-22 19:25:05.347867] [authz_core:error] [pid 578205:tid 125006455547584] [client 34.182.177. ...
show more
[2026-09-22 19:25:05.347867] [authz_core:error] [pid 578205:tid 125006455547584] [client 34.182.177.197:0] AH01630: client denied by server configuration: /var/www/*/.env.prod , error_notes:dot-files , URI:'/.env.prod'
[2026-09-22 19:25:05.352264] [authz_core:error] [pid 578206:tid 125006598354624] [client 34.182.177.197:0] AH01630: client denied by server configuration: /var/www/*/.env , error_notes:config-files , URI:'/.env'
[2026-09-22 19:25:05.355949] [authz_core:error] [pid 578206:tid 125006531212992] [client 34.182.177.197:0] AH01630: client denied by server configuration: /var/www/*/storage , error_notes:sensitive-files , URI:'/storage/logs/laravel.log'
[2026-09-22 19:25:05.358106] [authz_core:error] [pid 578206:tid 125006556391104] [client 34.182.177.197:0] AH01630: client denied by server configuration: /var/www/*/.env.bak , error_notes:backup-files , URI:'/.env.bak'
[2026-09-22 19:25:05.391019] [authz_core:error] [pid 578206:tid 125006606747328] [client 34.182.177.197:0] AH01630: client denied by se
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
dtorrer
2026-09-22 16:03:48
(8 hours ago)
General vulnerability scan.
Port Scan
๐บ๐ธ
TPI-Abuse
2026-09-22 15:37:24
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.182.177.197 (197.177.182.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.182.177.197 (197.177.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:37:17.098618 2026] [security2:error] [pid 30297:tid 30297] [client 34.182.177.197:46894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nlc-calumet.org"] [uri "/.env.old"] [unique_id "arKgrSqTCl04_3vrJ4ECSgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
wlt-blocker
2026-09-22 15:09:44
(9 hours ago)
Unauthorized access to webpage admin
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-22 15:09:36
(9 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ท๐บ
DZBOT
2026-09-22 15:09:21
(9 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 14:34:41
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.182.177.197 (197.177.182.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.182.177.197 (197.177.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:34:34.735811 2026] [security2:error] [pid 1383:tid 1383] [client 34.182.177.197:52348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "liverpoolfootballprogrammes.com"] [uri "/.env.local"] [unique_id "arKR-pDHePtPtIh1S3T-LgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-22 14:25:03
(9 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 14:01:40
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.182.177.197 (197.177.182.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.182.177.197 (197.177.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:01:32.827190 2026] [security2:error] [pid 22119:tid 22119] [client 34.182.177.197:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.luisguacache.com"] [uri "/.env.example"] [unique_id "arKKPLucQ0vzmGOfno9LawAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
clapper
2026-09-22 14:01:19
(10 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.182.177.197 (US/United States/197.177.182.34 ...
show more
(mod_security) mod_security (id:949110) triggered by 34.182.177.197 (US/United States/197.177.182.34.bc.googleusercontent.com): 3 in the last 3600 secs; ID: LUC
show less
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-22 13:33:44
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.182.177.197 (197.177.182.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.182.177.197 (197.177.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:33:37.232093 2026] [security2:error] [pid 16087:tid 16087] [client 34.182.177.197:60902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gulftelecom.com"] [uri "/.env.prod"] [unique_id "arKDsUqr3uV_kk92dFS8iQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-22 13:21:43
(10 hours ago)
[ti-07al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-07al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.182.177.197 - - [22/Sep/2026:15:21:26 +0200] "GET /.env.dev HTTP/1.1" 403 5813 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-09-22 12:56:56
(11 hours ago)
[22/Sep/2026:15:56:56 +0300] -- 34.182.177.197 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[22/Sep/2026:15:56:56 +0300] -- 34.182.177.197 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /.env HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
conseilgouz
2026-09-22 12:41:16
(11 hours ago)
ece-17 : Block hidden directories=>/.env(/)
Hacking