Anonymous
2026-08-01 20:17:04
(7 hours ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
๐จ๐ฆ
polycoda
2026-08-01 18:13:43
(9 hours ago)
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based)
Hacking
Web App Attack
๐บ๐ธ
MatCat
2026-08-01 18:05:04
(9 hours ago)
Banned by fail2ban: apache-webprobe
Port Scan
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-08-01 17:29:11
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.187.41.255 (255.41.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.41.255 (255.41.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:29:03.544309 2026] [security2:error] [pid 913877:tid 913877] [client 34.187.41.255:58274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dildog.ingberinteriors.com"] [uri "/.env.dev"] [unique_id "am4s3yRTsXYg1FNPde4NFgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
SCHAPPY
2026-08-01 16:48:40
(10 hours ago)
Brute-force attack to non-existent web resources, HTTP code 404.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-01 16:33:36
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.187.41.255 (255.41.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.41.255 (255.41.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:33:27.254277 2026] [security2:error] [pid 1027805:tid 1027805] [client 34.187.41.255:59626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pizazzsalonandspa.com"] [uri "/.env.dev"] [unique_id "am4f11yE1LRsn1JKaLU58gAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dwmp
2026-08-01 15:48:32
(11 hours ago)
Url probing: /.env.save
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-01 15:44:09
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.187.41.255 (255.41.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.41.255 (255.41.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:44:04.957494 2026] [security2:error] [pid 1471772:tid 1471772] [client 34.187.41.255:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kidswithcamerasmovie.com"] [uri "/.env.example"] [unique_id "am4URO0QDVGanhjt4bshkQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-01 15:21:19
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.187.41.255 (255.41.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.41.255 (255.41.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:21:14.318530 2026] [security2:error] [pid 2484957:tid 2484957] [client 34.187.41.255:38322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fusteriafontane.casademunt.com"] [uri "/.env.prod"] [unique_id "am4O6pnbd8jNBmnd0BCAngAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-08-01 15:10:06
(12 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-01 14:49:25
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.187.41.255 (255.41.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.41.255 (255.41.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:49:18.893235 2026] [security2:error] [pid 2820273:tid 2820273] [client 34.187.41.255:46958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nafsi-paris.mtalame.com"] [uri "/.env.save"] [unique_id "am4HbpkZz7mbdPI_awE3_wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
gadix
2026-08-01 14:16:52
(13 hours ago)
[01/Aug/2026:16:16:52.405068 +0200] am3_1A6KoEaDlOLbORfmywAAAJE 34.187.41.255 34198 127.0.0.1 7081
[ ...
show more
[01/Aug/2026:16:16:52.405068 +0200] am3_1A6KoEaDlOLbORfmywAAAJE 34.187.41.255 34198 127.0.0.1 7081
[01/Aug/2026:16:16:52.406982 +0200] am3_1A6KoEaDlOLbORfmzAAAAII 34.187.41.255 34208 127.0.0.1 7081
[01/Aug/2026:16:16:52.407674 +0200] am3_1A6KoEaDlOLbORfmzQAAAIQ 34.187.41.255 34210 127.0.0.1 7081
...
show less
Web App Attack
๐ฉ๐ช
LRob
2026-08-01 14:11:54
(13 hours ago)
CrowdSec: crowdsecurity/http-sensitive-files | req: /.env.local | 5 distinct paths | UA: crusader-wo ...
show more
CrowdSec: crowdsecurity/http-sensitive-files | req: /.env.local | 5 distinct paths | UA: crusader-worker/1.0
show less
Hacking
Anonymous
2026-08-01 14:02:31
(13 hours ago)
[ssd5.kdns.gr] httpd-config-scan: sites=www.example.com; logs=/var/log/httpd/access_log; samples=/.e ...
show more
[ssd5.kdns.gr] httpd-config-scan: sites=www.example.com; logs=/var/log/httpd/access_log; samples=/.env.dev | /.env.local | /.env.old
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-01 13:43:18
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.187.41.255 (255.41.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.41.255 (255.41.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 09:43:12.620511 2026] [security2:error] [pid 1128679:tid 1128679] [client 34.187.41.255:35084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mccompu.com"] [uri "/.env.backup"] [unique_id "am338AUclvUaAOSrTAPHDAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack