🇳🇱
e.fierstra
2026-09-03 22:37:34
(2 minutes ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 22:27:20
(13 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.78.148.201 (201.148.78.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.148.201 (201.148.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:27:12.658339 2026] [security2:error] [pid 19507:tid 19519] [client 34.78.148.201:24156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.secretdecoded.com"] [uri "/@fs/.env"] [unique_id "apn0QM6vDk2dfcNMc0d0-AAAAIg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 22:10:59
(29 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.78.148.201 (201.148.78.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.148.201 (201.148.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:10:52.394076 2026] [security2:error] [pid 19972:tid 19972] [client 34.78.148.201:23248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.the-it-man.com"] [uri "/@fs/.env"] [unique_id "apnwbHQ0ZVIdZEohRGfU3AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Omar Martínez
2026-09-03 22:09:55
(30 minutes ago)
[Thu Sep 03 16:09:41.159016 2026] [core:error] [pid 644525:tid 139864569787968] [client 34.78.148.20 ...
show more
[Thu Sep 03 16:09:41.159016 2026] [core:error] [pid 644525:tid 139864569787968] [client 34.78.148.201:64508] AH10244: invalid URI path (/@fs/../../.env?raw??)
[Thu Sep 03 16:09:52.974519 2026] [core:error] [pid 644525:tid 139864469141056] [client 34.78.148.201:52218] AH10244: invalid URI path (/@fs/../../../../../root/.env?raw??)
...
show less
Phishing
Email Spam
Blog Spam
2026-09-03 21:50:12
(50 minutes ago)
Bot / seems abusive / Apache connections: 36
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇪🇸
alferez
2026-09-03 21:48:16
(52 minutes ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
🇳🇱
Site.eu
2026-09-03 21:18:24
(1 hour ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Savvii
2026-09-03 21:05:28
(1 hour ago)
25 attempts against mh-misbehave-ban on taro
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-03 21:02:37
(1 hour ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 21:00:57
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.78.148.201 (201.148.78.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.148.201 (201.148.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:00:51.898597 2026] [security2:error] [pid 18784:tid 18784] [client 34.78.148.201:48968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rajabarber.com"] [uri "/@fs/src/.env"] [unique_id "apngA3NhKImOrsEMyG5b-QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-03 20:56:26
(1 hour ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
Holger
2026-09-03 20:43:53
(1 hour ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 20:34:31
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.78.148.201 (201.148.78.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.148.201 (201.148.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 16:34:22.992281 2026] [security2:error] [pid 12991:tid 12991] [client 34.78.148.201:40832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.beautyradio.com"] [uri "/@fs/src/.env"] [unique_id "apnZzojE_CvExb_PXeivxwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-03 19:35:02
(3 hours ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 19:30:35
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.78.148.201 (201.148.78.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.148.201 (201.148.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 15:30:27.290520 2026] [security2:error] [pid 23062:tid 23062] [client 34.78.148.201:12846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.lobibilisim.com"] [uri "/@fs/.env"] [unique_id "apnK08Sm0aJns4n1Rdit3QAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack