🇮🇪
AutosOnShow
2026-09-06 06:20:06
(9 hours ago)
blocked for webapp attack | path requested: / | seen at 2026-09-06 06:19:48.265 |
Web App Attack
🇨🇭
zynex
2026-09-06 06:12:59
(9 hours ago)
URL Probing: /.env
Web App Attack
Anonymous
2026-09-06 04:08:21
(11 hours ago)
Banned by Fail2Ban on server
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 03:55:45
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.85.154.118 (118.154.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.154.118 (118.154.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:55:41.862662 2026] [security2:error] [pid 21129:tid 21129] [client 34.85.154.118:55124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.c2cdisasterresponse.org"] [uri "/.env.dev"] [unique_id "apzkPWZKbJfqFfuDUWHqjwAAAGw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 03:26:25
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.85.154.118 (118.154.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.154.118 (118.154.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:26:21.445496 2026] [security2:error] [pid 19415:tid 19415] [client 34.85.154.118:49756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sawmat.com"] [uri "/.env.bak"] [unique_id "apzdXbFmILFJay1ExXO0qQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-06 03:06:10
(12 hours ago)
[ns3.backorder.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/actuator/configprops ...
show more
[ns3.backorder.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/actuator/configprops | /.env.production | /wp-config.php.swp
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 03:03:11
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.85.154.118 (118.154.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.154.118 (118.154.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:03:03.412118 2026] [security2:error] [pid 2593:tid 2593] [client 34.85.154.118:48172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "winnindustries.com"] [uri "/.env.example"] [unique_id "apzX544cs8uKZyFYupdbJwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇸
Smel
2026-09-06 03:03:03
(12 hours ago)
Unauthorized Probe/Connection, Hack -
Port Scan
Hacking
🇫🇷
masterguru
2026-09-06 02:30:35
(13 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:47:23
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.85.154.118 (118.154.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.154.118 (118.154.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:47:15.798353 2026] [security2:error] [pid 4714:tid 4714] [client 34.85.154.118:60442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.zoticus.com"] [uri "/.env.backup"] [unique_id "apzGI95V6YZLNWCoBxS4QgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ddobko
2026-09-06 00:55:06
(14 hours ago)
Bad Web Bot
Web App Attack
🇨🇭
Ribeye375
2026-09-06 00:06:37
(15 hours ago)
HIPS recon-attempt - Block tcp/0:65535
Web App Attack
🇷🇺
DZBOT
2026-09-06 00:03:19
(15 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 23:59:16
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.85.154.118 (118.154.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.154.118 (118.154.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 19:59:08.604565 2026] [security2:error] [pid 28196:tid 28196] [client 34.85.154.118:59320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamesallenwalker.com"] [uri "/.env.production"] [unique_id "apyszAg4mPI-VUd8EWzvZwAAADo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 23:26:53
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.85.154.118 (118.154.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.154.118 (118.154.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 19:26:49.517858 2026] [security2:error] [pid 22111:tid 22118] [client 34.85.154.118:48428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jrbllc.idealcentralvac.com"] [uri "/.env.production"] [unique_id "apylOXyjxZ7umzwoNPDgvwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack