🇿🇦
hostsec_za
2026-11-06 18:55:12
UTC ·
(12 hours ago)
cPanel/Webmail Auth Attack. 121 failed logins in 6 hours.
Brute-Force
🇺🇸
TPI-Abuse
2026-11-06 18:29:57
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.186.88.214 (214.88.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:29:54.671426 2026] [security2:error] [pid 16095:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.88.214 (214.88.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:29:54.671426 2026] [security2:error] [pid 16095:tid 16095] [client 34.186.88.214:42748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.keepaustinnuts.com"] [uri "/config/.env.php"] [unique_id "au4cotb29h0q5dnxwECcPQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 18:10:31
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.186.88.214 (214.88.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:10:23.952609 2026] [security2:error] [pid 26137:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.88.214 (214.88.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:10:23.952609 2026] [security2:error] [pid 26137:tid 26137] [client 34.186.88.214:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.kirklandhighlands.org"] [uri "/.env.config"] [unique_id "au4YD2K5Sj0uUo4jzsp5HgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-11-06 18:09:00
UTC ·
(13 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇪🇸
masterguru
2026-11-06 18:00:01
UTC ·
(13 hours ago)
BAD BOT - Detected and Blocked.. Matched phrase "baidu" at REQUEST_HEADERS:User-Agent. (1100000-122)
Bad Web Bot
🇿🇦
conure.sh
2026-11-06 17:44:21
UTC ·
(13 hours ago)
csagent: score 20.7: 404 noise floor x3, secrets grab x2; 1 domain(s) in 6s
Web App Attack
🇨🇴
conexcol
2026-11-06 17:43:41
UTC ·
(13 hours ago)
(cpanel) Failed cPanel login from 34.186.88.214 (US/United States/214.88.186.34.bc.googleusercontent.com): 10 in the last 3600 secs
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 17:24:33
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.186.88.214 (214.88.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:24:27.552077 2026] [security2:error] [pid 14559:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 34.186.88.214 (214.88.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:24:27.552077 2026] [security2:error] [pid 14559:tid 14559] [client 34.186.88.214:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gregquinn.com|F|2"] [data ".gregquinn.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gregquinn.com"] [uri "/z9x8c7v6b5-debug-trigger-www.gregquinn.com"] [unique_id "au4NS3iNmtPxnbtH8LV59wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-11-06 16:47:28
UTC ·
(14 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 16:15:06
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.186.88.214 (214.88.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:14:59.781674 2026] [security2:error] [pid 9324:tid 9 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.88.214 (214.88.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:14:59.781674 2026] [security2:error] [pid 9324:tid 9324] [client 34.186.88.214:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.kidswithcamerasmovie.com"] [uri "/storage/.env"] [unique_id "au39A2BEHPEjg7G11xu_6wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-11-06 16:05:27
UTC ·
(15 hours ago)
Too many Status 40X (23)
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-11-06 15:19:57
UTC ·
(15 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-06 15:18:15
UTC ·
(15 hours ago)
excessive HTTP 404 errors
Bad Web Bot
🇸🇪
vaia.cloud
2026-11-06 15:15:02
UTC ·
(15 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-06 14:42:55
UTC ·
(16 hours ago)
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.186.88.214 - - [06/Nov/2026:15:42:48 +0100] "GET /public../.env HTTP/1.1" 404 2092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleW ...
show more
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.186.88.214 - - [06/Nov/2026:15:42:48 +0100] "GET /public../.env HTTP/1.1" 404 2092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
...
show less
Bad Web Bot
Web App Attack
