🇩🇪
raph
2026-09-04 10:43:05
(19 minutes ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇫🇮
YF
2026-09-04 10:34:34
(27 minutes ago)
WordPress config file probe
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 09:55:46
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.64.69.99 (99.69.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.69.99 (99.69.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:55:41.534575 2026] [security2:error] [pid 23005:tid 23113] [client 34.64.69.99:41688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nrgla.com"] [uri "/.env.backup"] [unique_id "apqVnbbRlZcG9IeHctbwuwAAANI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 08:43:48
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.69.99 (99.69.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.69.99 (99.69.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 04:43:41.394797 2026] [security2:error] [pid 2223:tid 2223] [client 34.64.69.99:46656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reelfruits.com"] [uri "/.env.backup"] [unique_id "apqEvdoq6qmdXoDI8WcumQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-04 07:11:04
(3 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇸🇪
vaia.cloud
2026-09-04 07:05:02
(3 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇷🇺
DZBOT
2026-09-04 06:33:19
(4 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 05:55:15
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.69.99 (99.69.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.69.99 (99.69.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 01:55:09.448108 2026] [security2:error] [pid 1033:tid 1033] [client 34.64.69.99:54588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thevoodooguru.com"] [uri "/.env.old"] [unique_id "appdPXgPYT3p7aCYkYXDIgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 05:15:57
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.69.99 (99.69.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.69.99 (99.69.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 01:15:52.456944 2026] [security2:error] [pid 30666:tid 30666] [client 34.64.69.99:37830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weddingnapkinscustom.com"] [uri "/.env.prod"] [unique_id "appUCM9Kk4aZmsiuKweHEgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-04 05:05:46
(5 hours ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 04:58:29
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.69.99 (99.69.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.69.99 (99.69.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 00:58:21.857169 2026] [security2:error] [pid 31882:tid 31882] [client 34.64.69.99:36596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uni-plan.com"] [uri "/.env.old"] [unique_id "appP7YP3Cp9kOOH-NPQSVAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-04 04:52:06
(6 hours ago)
Web attack/malicious scanning detected
Web App Attack
2026-09-04 04:22:11
(6 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 03:53:13
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.69.99 (99.69.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.69.99 (99.69.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 23:53:08.530706 2026] [security2:error] [pid 9139:tid 9139] [client 34.64.69.99:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.c2cservices.com"] [uri "/.env.dev"] [unique_id "appApFpjW-c1VQz1mPl7mwAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-04 03:50:05
(7 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
