🇲🇾
Rizzy
2026-11-06 18:59:44
UTC ·
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇷🇴
clauss
2026-11-06 18:47:31
UTC ·
(1 day ago)
34.19.238.150 - - [06/Nov/2026:20:47:30 +0200] "GET /.env.common HTTP/2.0" 404 3520 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.19.238.150 - - [06/Nov/2026:20:47:30 +0200] "GET /.env.shared HTTP/2.0" 404 3520 "-" "Mozi ...
show more
34.19.238.150 - - [06/Nov/2026:20:47:30 +0200] "GET /.env.common HTTP/2.0" 404 3520 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.19.238.150 - - [06/Nov/2026:20:47:30 +0200] "GET /.env.shared HTTP/2.0" 404 3520 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
show less
Web App Attack
🇩🇪
LRob
2026-11-06 18:27:36
UTC ·
(1 day ago)
Secret file probe | method: GET | path: /rclone.conf, /assets../.env, /dist../.env (+12 more) | ua: CCBot/2.0 (https://commoncrawl.org/faq/), Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Ge ...
show more
Secret file probe | method: GET | path: /rclone.conf, /assets../.env, /dist../.env (+12 more) | ua: CCBot/2.0 (https://commoncrawl.org/faq/), Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) (+8 more) | src_port: 59492
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 17:36:42
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.19.238.150 (150.238.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:36:35.004141 2026] [security2:error] [pid 22984:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.238.150 (150.238.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:36:35.004141 2026] [security2:error] [pid 22984:tid 22984] [client 34.19.238.150:44698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.setx-law.com"] [uri "/config/.env.php"] [unique_id "au4QIxj0lPkRgHSaUP7YMAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 16:16:48
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.19.238.150 (150.238.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:16:45.162060 2026] [security2:error] [pid 1708308:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.238.150 (150.238.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:16:45.162060 2026] [security2:error] [pid 1708308:tid 1708320] [client 34.19.238.150:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "m.tapdd.com"] [uri "/config/.env.php"] [unique_id "au39bTbon4mtJfo285lXRAAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-06 15:46:09
UTC ·
(1 day ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.19.238.150 - - [06/Nov/2026:16:45:56 +0100] "GET /userfiles?path=../../.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1. ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.19.238.150 - - [06/Nov/2026:16:45:56 +0100] "GET /userfiles?path=../../.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-11-06 15:21:32
UTC ·
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇷🇴
gtheo99
2026-11-06 14:13:50
UTC ·
(1 day ago)
(mod_security) mod_security (id:900006) triggered by 34.19.238.150 (CA/Canada/150.238.19.34.bc.googleusercontent.com): 3 in the last 900 secs (CF_ENABLE)
Port Scan
🇮🇹
VHosting
2026-11-06 13:40:04
UTC ·
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack