Anonymous
2026-08-26 09:58:02
(2 minutes ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1, \x16\x03\x01
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 09:49:23
(11 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:49:17.861572 2026] [security2:error] [pid 20778:tid 20778] [client 34.55.148.18:44036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "getmypov.com"] [uri "/.git/config"] [unique_id "ao62nSxSNP-8JobgjPQ_wwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 09:25:33
(34 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:25:24.270945 2026] [security2:error] [pid 12915:tid 12915] [client 34.55.148.18:37694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aabondwnc.com"] [uri "/.git/config"] [unique_id "ao6xBE06tKMQK26Oj-AYuAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-08-26 08:41:01
(1 hour ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
Anonymous
2026-08-26 08:01:44
(1 hour ago)
34.55.148.18 - - [26/Aug/2026:10:01:44 +0200] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows ...
show more
34.55.148.18 - - [26/Aug/2026:10:01:44 +0200] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)"
show less
Web App Attack
๐ท๐บ
DZBOT
2026-08-26 07:43:21
(2 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-08-26 05:15:53
(4 hours ago)
6 attacks on config grabbing URLs (type 2), PHP URLs, env grabbing URLs, VC URLs:
GET /config.json H ...
show more
6 attacks on config grabbing URLs (type 2), PHP URLs, env grabbing URLs, VC URLs:
GET /config.json HTTP/1.1
GET /wp-config.php-backup HTTP/1.1
GET /.env.bak HTTP/1.1
GET /.git/config HTTP/1.1
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 04:59:11
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 00:59:06.436154 2026] [security2:error] [pid 14699:tid 14699] [client 34.55.148.18:12890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "n4ocw.com"] [uri "/.env"] [unique_id "ao5ymmgANcdwFUUi6xExrgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 04:37:04
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 00:36:56.644875 2026] [security2:error] [pid 20416:tid 20416] [client 34.55.148.18:51730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "n-vil.com"] [uri "/.env"] [unique_id "ao5taOtOmY_YeLvWn5mGjQAAAI0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 00:34:22
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 20:34:17.797738 2026] [security2:error] [pid 9811:tid 9811] [client 34.55.148.18:17908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mysticalparadise.com"] [uri "/.env"] [unique_id "ao40iVCht6SuKkTAHkLq0AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-08-25 23:29:30
(10 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.env (Match: /.env)
show less
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 22:43:07
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 18:43:03.421020 2026] [security2:error] [pid 9398:tid 9398] [client 34.55.148.18:54406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "myrtlebeachpartybuses.com"] [uri "/.env"] [unique_id "ao4ad0VtCkfOi_5MtFSmMAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-25 22:13:28
(11 hours ago)
PSCSERV WPSCAN 34.55.148.18
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 22:01:41
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 18:01:37.791212 2026] [security2:error] [pid 2735774:tid 2735834] [client 34.55.148.18:34314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "myrasnyder.com"] [uri "/.env"] [unique_id "ao4QwT6iW2O3PMjTO6MX7AAAAVY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 20:46:47
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.55.148.18 (18.148.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 16:46:41.560929 2026] [security2:error] [pid 21323:tid 21323] [client 34.55.148.18:56886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mypensees.com"] [uri "/.env"] [unique_id "ao3_MZLxiW7R91qyBEsiOQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack