🇫🇷
masterguru
2026-08-28 10:07:39
(56 minutes ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇨🇭
zynex
2026-08-27 22:15:50
(12 hours ago)
URL Probing: /wp-config.php~
Web App Attack
🇮🇹
clamehost.it
2026-08-27 21:22:04
(13 hours ago)
Automatic report - Brute Force attack using this IP address
Brute-Force
🇵🇱
Woytass
2026-08-27 21:03:15
(14 hours ago)
CSF/lfd permanent block on srv1.woytas.ovh. Trigger=LF_MODSEC; ports=*; (mod_security) mod_security ...
show more
CSF/lfd permanent block on srv1.woytas.ovh. Trigger=LF_MODSEC; ports=*; (mod_security) mod_security (id:949110) triggered by 34.74.91.30 (US/United States/30.91.74.34.bc.googleusercontent.com): 5 in the last 3600 secs
show less
Web App Attack
🇩🇪
gadix
2026-08-27 18:48:21
(16 hours ago)
[27/Aug/2026:20:48:18.190710 +0200] apCGcj0uOXIrZQMvSXAOKwAAAAc 34.74.91.30 49698 127.0.0.1 7081
[27 ...
show more
[27/Aug/2026:20:48:18.190710 +0200] apCGcj0uOXIrZQMvSXAOKwAAAAc 34.74.91.30 49698 127.0.0.1 7081
[27/Aug/2026:20:48:18.199694 +0200] apCGcj0uOXIrZQMvSXAOLQAAAAI 34.74.91.30 49728 127.0.0.1 7081
[27/Aug/2026:20:48:18.199763 +0200] apCGchXJJKMimsbY5MpSlgAAAEw 34.74.91.30 49736 127.0.0.1 7081
...
show less
Web App Attack
🇨🇦
john doe
2026-08-27 18:10:48
(16 hours ago)
SentinelBot: Spring Boot Exploit (score: 72)
Web App Attack
🇺🇸
mnsf
2026-08-27 18:05:36
(16 hours ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 17:52:08
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.74.91.30 (30.91.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.91.30 (30.91.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 13:52:04.539692 2026] [security2:error] [pid 27510:tid 27510] [client 34.74.91.30:58340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vicmackenzie.com"] [uri "/.env.production"] [unique_id "apB5RMrNDv9e4EkeOcKi2gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-27 17:15:39
(17 hours ago)
[ssd5.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/actuator/env | /.env.loca ...
show more
[ssd5.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/actuator/env | /.env.local | /actuator/configprops
show less
Hacking
Web App Attack
🇳🇱
debestelapp
2026-08-27 16:55:07
(18 hours ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 16:08:48
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.74.91.30 (30.91.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.91.30 (30.91.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:08:43.986630 2026] [security2:error] [pid 13703:tid 13703] [client 34.74.91.30:60970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.weathercarib.weathercarib.net"] [uri "/.env.backup"] [unique_id "apBhC2vNlJxKDDgIAU64ogAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 15:47:54
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.74.91.30 (30.91.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.91.30 (30.91.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:47:48.762572 2026] [security2:error] [pid 24786:tid 24786] [client 34.74.91.30:45092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lexie.org"] [uri "/.env.production"] [unique_id "apBcJP3muCK5jufUfJjhMwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
ALPHANET
2026-08-27 15:44:48
(19 hours ago)
web exploits
Hacking
Exploited Host
Web App Attack
2026-08-27 15:20:02
(19 hours ago)
suspicious request in access.log
Web App Attack
🇳🇱
e.fierstra
2026-08-27 15:00:31
(20 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack