🇮🇪
AutosOnShow
2026-08-27 21:46:05
(59 minutes ago)
blocked for webapp attack | path requested: /.env | seen at 2026-08-27 21:45:48.561 |
Web App Attack
🇩🇪
todix
2026-08-27 21:25:44
(1 hour ago)
WebAttack or semilar from 34.30.200.241
Web App Attack
🇺🇸
NXTwoThou
2026-08-27 21:04:48
(1 hour ago)
/.env.backup
Web App Attack
2026-08-27 20:15:52
(2 hours ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇮🇪
AutosOnShow
2026-08-27 19:27:04
(3 hours ago)
blocked for webapp attack | path requested: /.env | seen at 2026-08-27 19:26:49.351 |
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 19:22:26
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.30.200.241 (241.200.30.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.200.241 (241.200.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 15:22:20.537206 2026] [security2:error] [pid 9997:tid 9997] [client 34.30.200.241:41740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinnaird.enterprises.pages4you.com"] [uri "/wp-config.php.swp"] [unique_id "apCObGEVNkRdCZGyhigTmgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
janbro
2026-08-27 18:58:55
(3 hours ago)
Automated attempt to access sensitive configuration files.
Port Scan
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 18:49:31
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.30.200.241 (241.200.30.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.200.241 (241.200.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 14:49:27.792484 2026] [security2:error] [pid 26838:tid 26838] [client 34.30.200.241:48346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scott.bccworldmedia.com"] [uri "/wp-config.php~"] [unique_id "apCGtyq1w4wOZphxZhX5qQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-27 18:35:02
(4 hours ago)
suspicious request in access.log
Web App Attack
🇫🇮
paissangroup
2026-08-27 17:22:13
(5 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 16:45:39
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.30.200.241 (241.200.30.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.200.241 (241.200.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:45:24.892439 2026] [security2:error] [pid 14624:tid 14624] [client 34.30.200.241:42138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jhollingshead.bilund.com"] [uri "/.env.example"] [unique_id "apBppL6873T3_jiC_BSLLgAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
hidemail.app
2026-08-27 16:05:35
(6 hours ago)
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto ...
show more
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban.
show less
Web App Attack
Hacking
🇸🇪
vaia.cloud
2026-08-27 15:30:06
(7 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 15:26:28
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.30.200.241 (241.200.30.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.200.241 (241.200.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:26:21.035985 2026] [security2:error] [pid 12404:tid 12430] [client 34.30.200.241:37296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "epstransparency.org"] [uri "/.env.example"] [unique_id "apBXHUMxlDLTqmmkGpyymgAAARM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 15:00:08
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.30.200.241 (241.200.30.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.200.241 (241.200.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 10:59:59.344856 2026] [security2:error] [pid 30700:tid 30700] [client 34.30.200.241:36592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scoretopicturenetwork.com"] [uri "/.env"] [unique_id "apBQ71-TKISxwkidpCnNFgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack