🇺🇸
TPI-Abuse
2026-09-01 03:08:41
(28 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.64.239.190 (190.239.64.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.239.190 (190.239.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 23:08:33.768597 2026] [security2:error] [pid 10411:tid 10411] [client 34.64.239.190:34372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pascalroy.com"] [uri "/.env.backup"] [unique_id "apZBsfqFb4hrOFtNjdG9xQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-01 03:04:28
(32 minutes ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 02:47:01
(50 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.64.239.190 (190.239.64.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.239.190 (190.239.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:46:57.035800 2026] [security2:error] [pid 14087:tid 14092] [client 34.64.239.190:49804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jd-mason.com"] [uri "/.env.old"] [unique_id "apY8ofaFODPEoRpIu-ReuQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-09-01 02:21:53
(1 hour ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇲🇾
Rizzy
2026-09-01 01:37:34
(1 hour ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
big-cloud.nl
2026-09-01 00:55:19
(2 hours ago)
Try to access /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:15:21
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.239.190 (190.239.64.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.239.190 (190.239.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:15:16.117556 2026] [security2:error] [pid 19932:tid 19932] [client 34.64.239.190:45230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.dunningtons.com"] [uri "/.env"] [unique_id "apYZFBhEz03yTD-NicQZzwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-08-31 23:45:01
(3 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 22:57:13
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.239.190 (190.239.64.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.239.190 (190.239.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 18:57:04.675264 2026] [security2:error] [pid 12724:tid 12724] [client 34.64.239.190:34136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bsa1688.com"] [uri "/.env.prod"] [unique_id "apYGwAqxn2o_-LgMkPCutAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-08-31 22:22:31
(5 hours ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /wp-config.php.bak (+12 more) | 2026-08-31 22:22 UTC
show less
Hacking
Web App Attack
🇮🇹
VHosting
2026-08-31 22:20:05
(5 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-08-31 17:50:15
(9 hours ago)
| [Dangerous/South Korea] Aggressive IP 34.64.239.190 (~30 hits). Type: DoS Defender- Web server 400 ...
show more
| [Dangerous/South Korea] Aggressive IP 34.64.239.190 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection