🇳🇱
e.fierstra
2026-09-30 04:49:36
(2 weeks ago)
excessive HTTP 404 errors
Bad Web Bot
🇬🇧
abivia
2026-09-30 04:47:36
(2 weeks ago)
Abivia WAF trigger: Rule scriptKiddies: Probing for vulnerabilities uri: /z9x8c7v6b5-debug-trigger-a ...
show more
Abivia WAF trigger: Rule scriptKiddies: Probing for vulnerabilities uri: /z9x8c7v6b5-debug-trigger-abivia.ca
show less
Hacking
🇳🇱
Site.eu
2026-09-30 03:58:19
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-30 03:14:05
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.187.188.94 (94.188.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.188.94 (94.188.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 23:14:01.716196 2026] [security2:error] [pid 31821:tid 31821] [client 34.187.188.94:34804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.abecasis.com"] [uri "/.env"] [unique_id "arx-eS64SmCbmW5Gzh37WgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
pipeline.es
2026-09-30 02:41:13
(2 weeks ago)
Web scanning / probing for vulnerable paths | URL: /@fs/src/.env?raw?? | Evidence: agilityturismo.co ...
show more
Web scanning / probing for vulnerable paths | URL: /@fs/src/.env?raw?? | Evidence: agilityturismo.com.br 34.187.188.94 - - [30/Sep/2026:04:41:00 +0200] \"GET /@fs/src/.env?raw?? HTTP/2.0\" 404 19525 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email])\" GEOIP_COUNTRY_CODE=US 44627 | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
🇺🇸
dot.mg
2026-09-30 02:17:02
(2 weeks ago)
Bad behaviour
Web Spam
🇺🇸
TPI-Abuse
2026-09-30 02:16:56
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.187.188.94 (94.188.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.188.94 (94.188.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 22:16:51.129502 2026] [security2:error] [pid 31197:tid 31197] [client 34.187.188.94:34208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.aarce.me"] [uri "/server/.env"] [unique_id "arxxE4QzE5EMyQORDKoC0wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 01:48:52
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.187.188.94 (94.188.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.188.94 (94.188.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:48:44.690379 2026] [security2:error] [pid 6147:tid 6147] [client 34.187.188.94:58684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.4115thewestford.com"] [uri "/docker/.env"] [unique_id "arxqfOzrzmdxTpURFTh4mAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Catalin Negru
2026-09-29 22:53:26
(2 weeks ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇺🇸
TPI-Abuse
2026-09-29 22:01:32
(2 weeks ago)
(mod_security) mod_security (id:949110) triggered by 34.187.188.94 (94.188.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 34.187.188.94 (94.188.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 18:01:25.595840 2026] [security2:error] [pid 703:tid 703] [client 34.187.188.94:43218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "21oaksfarm.com"] [uri "/z9x8c7v6b5-debug-trigger-21oaksfarm.com"] [unique_id "arw1Nf67UnkEyvhEEJpTtQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
abivia
2026-09-29 21:34:52
(2 weeks ago)
Abivia WAF trigger: Rule scriptKiddies: Credential probing uri: /dist/manifest.json
Hacking
🇺🇸
TPI-Abuse
2026-09-29 20:55:11
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.187.188.94 (94.188.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.188.94 (94.188.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:55:03.213496 2026] [security2:error] [pid 23129:tid 23129] [client 34.187.188.94:45348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "act-research.com"] [uri "/.env.production"] [unique_id "arwlp3YU13iDFTityDu8wQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 20:11:25
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.187.188.94 (94.188.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.188.94 (94.188.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:11:17.602343 2026] [security2:error] [pid 1245:tid 1245] [client 34.187.188.94:43110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.1writeforthegrant.com"] [uri "/web/.env"] [unique_id "arwbZUAfvL1WFfIyQN5hRgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 19:54:56
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.187.188.94 (94.188.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.187.188.94 (94.188.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 15:54:52.716578 2026] [security2:error] [pid 5001:tid 5001] [client 34.187.188.94:51920] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||20dekopas.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "20dekopas.com"] [uri "/z9x8c7v6b5-debug-trigger-20dekopas.com"] [unique_id "arwXjCtcJ9RENIC2gQDlwgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 19:29:34
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.187.188.94 (94.188.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.188.94 (94.188.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 15:29:29.445721 2026] [security2:error] [pid 11918:tid 11918] [client 34.187.188.94:40608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adamscott.us"] [uri "/config/.env"] [unique_id "arwRmfofLpgBLBryic3TNAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
