🇸🇪
vaia.cloud
2026-09-07 22:10:03
(7 hours ago)
crowdsecurity/http-path-traversal-probing
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-07 20:08:46
(9 hours ago)
Excessive 404/403 errors
Brute-Force
Anonymous
2026-09-07 20:08:35
(9 hours ago)
apache vulnerability scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 20:05:30
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.82.129.254 (254.129.82.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.129.254 (254.129.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 16:05:23.293832 2026] [security2:error] [pid 20802:tid 20802] [client 34.82.129.254:57898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pencilnerd.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fapp/.env"] [unique_id "ap8ZA0zqvUtyIoYy63KJIAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-07 19:58:11
(9 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
big-cloud.nl
2026-09-07 19:35:20
(9 hours ago)
Try to access /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw??
Web App Attack
🇳🇱
debestelapp
2026-09-07 19:10:12
(10 hours ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 19:08:31
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.82.129.254 (254.129.82.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.129.254 (254.129.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:08:24.222040 2026] [security2:error] [pid 22415:tid 22432] [client 34.82.129.254:57864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.selecttech.stonyp.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252froot/.env"] [unique_id "ap8LqIZ7ZCQ-bYZrvEIJ9wAAAI4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-07 19:05:22
(10 hours ago)
Too many Status 40X (15)
Brute-Force
Web App Attack
Anonymous
2026-09-07 18:48:33
(10 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-07 18:48:21
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.82.129.254 (254.129.82.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.129.254 (254.129.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 14:48:17.617836 2026] [security2:error] [pid 17327:tid 17327] [client 34.82.129.254:48414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ohiobabe.com"] [uri "/@fs/.env"] [unique_id "ap8G8TJwtv2N7Nadq8TOzAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-09-07 18:35:27
(10 hours ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-07 18:22:42
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.82.129.254 (254.129.82.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.129.254 (254.129.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 14:22:34.400499 2026] [security2:error] [pid 3835:tid 3835] [client 34.82.129.254:48136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pcsllcpa.apfarrell.com"] [uri "/@fs/app/.env"] [unique_id "ap8A6iOOF49HHUPdK28iyQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-07 18:21:46
(11 hours ago)
[da.kdns.gr] httpd-config-scan: sites=www.tentesmargaritis.com; logs=/var/log/httpd/domains/tentesma ...
show more
[da.kdns.gr] httpd-config-scan: sites=www.tentesmargaritis.com; logs=/var/log/httpd/domains/tentesmargaritis.com.log; samples=/@fs/app/rootkey.csv?raw?? | /@fs/src/.env?raw?? | /@fs/.env.development?raw??
show less
Hacking
Web App Attack
🇧🇪
cmbplf
2026-09-07 17:35:12
(11 hours ago)
1.903 requests with url.path */@fs/*
782 requests with url.path *.aws/*
234 requests with url.pat ...
show more
1.903 requests with url.path */@fs/*
782 requests with url.path *.aws/*
234 requests with url.path *.config/*
show less
Brute-Force
Bad Web Bot