🇳🇱
Roderic
2026-08-26 18:34:30
(8 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted])
Bad Web Bot
🇩🇪
LRob
2026-08-26 17:14:09
(10 hours ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.env (+14 more) | 2026-08-26 17:14 UTC
show less
Hacking
Web App Attack
🇫🇷
masterguru
2026-08-26 16:29:47
(10 hours ago)
Restricted File Access Attempt. Matched phrase "/@fs/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 16:08:10
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.32.232.168 (168.232.32.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.232.168 (168.232.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 12:08:04.943948 2026] [security2:error] [pid 549529:tid 549553] [client 34.32.232.168:27324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marinkovich.org"] [uri "/static../.env"] [unique_id "ao8PZKKHc8vyIo5hQ63xMwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-08-26 15:31:39
(11 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-08-26 15:26:44
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.32.232.168 (168.232.32.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.232.168 (168.232.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 11:26:38.855170 2026] [security2:error] [pid 4083:tid 4083] [client 34.32.232.168:50846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rahmanou.com"] [uri "/.env"] [unique_id "ao8Frrj1QQ1r3zxuJGJ78wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-08-26 15:08:19
(12 hours ago)
csagent: score 20.8: 404 noise floor x3, secrets grab x2; 1 domain(s) in 0s
Web App Attack
🇫🇷
COMAITE
2026-08-26 15:03:17
(12 hours ago)
Common web attack from 34.32.232.168.
Web App Attack
🇬🇧
gws-hostmaster
2026-08-26 14:53:52
(12 hours ago)
ModSecurity OWASP CRS (Anomaly Score: 30): OS File Access Attempt;Path Traversal Attack (/../) or (/ ...
show more
ModSecurity OWASP CRS (Anomaly Score: 30): OS File Access Attempt;Path Traversal Attack (/../) or (/.../);Remote Command Execution: Unix Shell Code Found;Restricted File Access Attempt;The Application Returned a 500-Level Status Code;URL file extension is restricted by policy;
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 14:23:54
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.32.232.168 (168.232.32.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.232.168 (168.232.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 10:23:48.255166 2026] [security2:error] [pid 18126:tid 18126] [client 34.32.232.168:53014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "christianbroadcastingleague.com"] [uri "/static../.env"] [unique_id "ao729A7RQmLRK9twdBkBeQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
middelkoopcc
2026-08-26 13:26:02
(13 hours ago)
2026-08-26 15:23:15 GET /@fs/proc/self/environ [301] && 2026-08-26 15:23:15 GET /@fs/home/ec2-user/. ...
show more
2026-08-26 15:23:15 GET /@fs/proc/self/environ [301] && 2026-08-26 15:23:15 GET /@fs/home/ec2-user/.aws/credentials?raw?? [301] && 2026-08-26 15:23:15 GET /.env [301] && 149 more within 20 minutes
show less
Web App Attack
🇳🇱
Savvii
2026-08-26 12:14:01
(15 hours ago)
20 attempts against mh-misbehave-ban on moon
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-08-26 10:01:16
(17 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇹
mediarama.com
2026-08-26 09:17:25
(18 hours ago)
Banned by Fail2Ban
Web App Attack
2026-08-26 09:15:01
(18 hours ago)
suspicious request in access.log
Web App Attack