๐ซ๐ท
masterguru
2026-09-02 07:05:57
(1 hour ago)
Restricted File Access Attempt. Matched phrase ".sql.gz" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 13:56:14
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.117.101 (101.117.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.117.101 (101.117.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:56:09.865421 2026] [security2:error] [pid 5161:tid 5161] [client 34.88.117.101:33394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.digbiellc.com"] [uri "/.env.backup"] [unique_id "apbZecVYfq7-CPmhaUTQFgAAADY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 12:57:32
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.117.101 (101.117.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.117.101 (101.117.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:57:27.866374 2026] [security2:error] [pid 10718:tid 10718] [client 34.88.117.101:54232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pioneercanadian.com"] [uri "/.env.backup"] [unique_id "apbLtzu2nxH1EQ1OY1vBFgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
zynex
2026-09-01 12:54:27
(19 hours ago)
URL Probing: /wp-config.php.bak
Web App Attack
๐ฉ๐ช
FD-IX
2026-09-01 11:09:00
(21 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ฉ๐ช
Grossmann-Gruppe
2026-09-01 10:58:10
(21 hours ago)
Plesk Fail2Ban: plesk-modsecurity
Hacking
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-01 10:55:47
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.117.101 (101.117.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.117.101 (101.117.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:55:40.408597 2026] [security2:error] [pid 1610:tid 1610] [client 34.88.117.101:58494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web63.dnchosting.com"] [uri "/.env.save"] [unique_id "apavLAlgPH6ZDGCPdHQV2gAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-01 10:13:56
(22 hours ago)
cloudlinux2 fail2ban: 2026-09-01 12:09:01,425 fail2ban.filter [1605]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-01 12:09:01,425 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.88.117.101 - 2026-09-01 12:09:01cloudlinux2 fail2ban: 2026-09-01 12:09:01,469 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.88.117.101 - 2026-09-01 12:09:01cloudlinux2 fail2ban: 2026-09-01 12:09:01,417 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.88.117.101 - 2026-09-01 12:09:01cloudlinux2 fail2ban: 2026-09-01 12:09:01,459 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.88.117.101 - 2026-09-01 12:09:01cloudlinux2 fail2ban: 2026-09-01 12:09:01,443 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.88.117.101 - 2026-09-01 12:09:01cloudlinux2 fail2ban: 2026-09-01 12:09:01,508 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.88.117.101 - 2026-09-01 12:09:01cloudlinux2 fail2ban: 2026-09-01 12:09:01,485 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.88.117.101 - 2026-09-01 12:
show less
Brute-Force
Anonymous
2026-09-01 09:05:03
(23 hours ago)
suspicious request in access.log
Web App Attack
Anonymous
2026-09-01 08:54:42
(23 hours ago)
[ns41.kdns.gr] httpd-config-scan: sites=www.seapraxismaritime.com; logs=/var/log/httpd/domains/seapr ...
show more
[ns41.kdns.gr] httpd-config-scan: sites=www.seapraxismaritime.com; logs=/var/log/httpd/domains/seapraxismaritime.com.log; samples=/.env.dev | /.env.backup | /wp-config.php~
show less
Hacking
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-01 08:46:25
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ซ๐ท
COMAITE
2026-09-01 08:45:48
(1 day ago)
Suspicious URL access.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 07:45:18
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.88.117.101 (101.117.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.117.101 (101.117.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:45:12.266306 2026] [security2:error] [pid 17506:tid 17506] [client 34.88.117.101:35552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.eye7graphics.com"] [uri "/.env.backup"] [unique_id "apaCiNHrA4Ba-jPS-e-hWQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-09-01 06:44:55
(1 day ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.env (+9 more) | 2026-09-01 06:44 UTC
show less
Hacking
Web App Attack
๐ฒ๐พ
Rizzy
2026-09-01 06:34:26
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack