Anonymous
2026-09-06 04:33:34
(12 minutes ago)
Aggressive web scan
Web App Attack
🇮🇩
bps-statistics
2026-09-06 03:09:29
(1 hour ago)
Web Application Attacks
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 02:59:35
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.84.141.239 (239.141.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.141.239 (239.141.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:59:27.309992 2026] [security2:error] [pid 9235:tid 9235] [client 34.84.141.239:55524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.grampys.toys"] [uri "/.env.backup"] [unique_id "apzXD3iWOTvL7zweJ87PwAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-09-06 02:26:03
(2 hours ago)
URL Probing: /wp-config.php~
Web App Attack
🇩🇪
Marc
2026-09-06 02:24:53
(2 hours ago)
34.84.141.239 - - [06/Sep/2026:04:24:52 +0200] "GET /backup.7z HTTP/1.1" 404 4617 "-" "Mozilla/5.0 ( ...
show more
34.84.141.239 - - [06/Sep/2026:04:24:52 +0200] "GET /backup.7z HTTP/1.1" 404 4617 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.84.141.239 - - [06/Sep/2026:04:24:52 +0200] "GET /backup.tar HTTP/1.1" 404 4617 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.84.141.239 - - [06/Sep/2026:04:24:52 +0200] "GET /www.zip HTTP/1.1" 404 4616 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
show less
Brute-Force
🇩🇪
raph
2026-09-06 02:10:33
(2 hours ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:43:42
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.141.239 (239.141.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.141.239 (239.141.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:43:37.852658 2026] [security2:error] [pid 31079:tid 31079] [client 34.84.141.239:34114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yakarinc.com"] [uri "/.env.local"] [unique_id "apzFSaLzPtfrIZdvxGZ1gQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:19:35
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.141.239 (239.141.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.141.239 (239.141.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:19:29.011367 2026] [security2:error] [pid 3505780:tid 3505898] [client 34.84.141.239:40740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theaquifer.org"] [uri "/wp-config.php~"] [unique_id "apy_oaeVUu6W99IeSwEZhQAAAgY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 00:16:42
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.141.239 (239.141.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.141.239 (239.141.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 20:16:37.643472 2026] [security2:error] [pid 32228:tid 32228] [client 34.84.141.239:57176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anbruswebdesign.anbruskitchens.com"] [uri "/.env.old"] [unique_id "apyw5afUIRFPyaU_H52d0gAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-05 23:55:02
(4 hours ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 23:54:10
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.141.239 (239.141.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.141.239 (239.141.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 19:54:05.349592 2026] [security2:error] [pid 8386:tid 8386] [client 34.84.141.239:47094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "backyard-relics.com"] [uri "/wp-config.php.swp"] [unique_id "apyrnWedM3aQNU-1I3c8egAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-05 23:22:51
(5 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 23:00:54
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.141.239 (239.141.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.141.239 (239.141.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 19:00:47.909437 2026] [security2:error] [pid 17483:tid 17483] [client 34.84.141.239:35200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.discountweddingnapkins.com"] [uri "/.env.local"] [unique_id "apyfH7u-gJUaIc35RAIz3gAAAE4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-09-05 23:00:11
(5 hours ago)
Web App Attack
Anonymous
2026-09-05 22:39:09
(6 hours ago)
Web scanner: GET /.env.save
Web App Attack
Hacking