🇬🇧
consul.to
2026-09-08 08:48:02
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
BlueWire Hosting
2026-09-08 04:07:27
UTC ·
(2 months ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇳🇱
BlueWire Hosting
2026-09-08 03:28:06
UTC ·
(2 months ago)
Probing websites for vulnerabilities
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-06 22:19:42
UTC ·
(2 months ago)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-06 22:01:06
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-05.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-06 03:52:44
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.47.29.184 (184.29.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:52:40.724431 2026] [security2:error] [pid 11622:tid 11 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.29.184 (184.29.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:52:40.724431 2026] [security2:error] [pid 11622:tid 11622] [client 34.47.29.184:48714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.softwarezz.net"] [uri "/.env.old"] [unique_id "apzjiIAfSwTVALHPLOQciwAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-09-06 03:28:22
UTC ·
(2 months ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 03:01:33
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.47.29.184 (184.29.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:01:28.280908 2026] [security2:error] [pid 16489:tid 16 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.29.184 (184.29.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:01:28.280908 2026] [security2:error] [pid 16489:tid 16489] [client 34.47.29.184:53180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.fishing-links.com"] [uri "/.env"] [unique_id "apzXiGTl2Pz5OV0FL5-jZAAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-09-06 02:57:20
UTC ·
(2 months ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 02:43:42
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.47.29.184 (184.29.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:43:38.322152 2026] [security2:error] [pid 3643496:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.29.184 (184.29.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:43:38.322152 2026] [security2:error] [pid 3643496:tid 3643496] [client 34.47.29.184:55732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adamscott.us"] [uri "/wp-config.php.swp"] [unique_id "apzTWtqZRQl7Tj75_8iWbgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-06 02:25:58
UTC ·
(2 months ago)
(mod_security) mod_security (id:949110) triggered by 34.47.29.184 (CA/Canada/184.29.47.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:46:41
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.47.29.184 (184.29.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:46:35.541410 2026] [security2:error] [pid 13507:tid 13 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.29.184 (184.29.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:46:35.541410 2026] [security2:error] [pid 13507:tid 13507] [client 34.47.29.184:34026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frickandfracks.com"] [uri "/.env.production"] [unique_id "apzF-wWIE-ejbvM12tklDwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dom4k
2026-09-06 01:29:38
UTC ·
(2 months ago)
34.47.29.184 - - [06/Sep/2026:01:29:37 +0000] "GET /.env.example HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
...
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:19:08
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.47.29.184 (184.29.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:19:03.810330 2026] [security2:error] [pid 17728:tid 17 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.29.184 (184.29.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:19:03.810330 2026] [security2:error] [pid 17728:tid 17728] [client 34.47.29.184:59356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "susansambou.org"] [uri "/.env.local"] [unique_id "apy_h3Vfxek6Vr7wlJ3qXQAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
raph
2026-09-06 00:54:31
UTC ·
(2 months ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack