๐ณ๐ฑ
oisecnet
2026-09-01 21:02:21
(1 hour ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-09-01. 237 requests from this ...
show more
Automated report: Unauthorized vulnerability scanning detected on 2026-09-01. 237 requests from this IP.
show less
Port Scan
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 12:50:14
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.95.233.16 (16.233.95.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.233.16 (16.233.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:50:05.935523 2026] [security2:error] [pid 5761:tid 5761] [client 34.95.233.16:47096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "privateflutelessons.ipostsocialmedia.com"] [uri "/.env.old"] [unique_id "apbJ_fdHJE1bIyxXP6MBCwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 11:06:06
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.95.233.16 (16.233.95.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.233.16 (16.233.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:05:59.732290 2026] [security2:error] [pid 20082:tid 20157] [client 34.95.233.16:58432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.iguanablue.com"] [uri "/.env.backup"] [unique_id "apaxl0zo3XFLOK5zIgB_VAAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
raph
2026-09-01 10:11:59
(12 hours ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
Anonymous
2026-09-01 09:45:40
(12 hours ago)
[ssd5.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/actuator/configprops | /. ...
show more
[ssd5.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/actuator/configprops | /.env.old | /wp-config.php~
show less
Hacking
Web App Attack
๐ง๐พ
lns.bz
2026-09-01 09:40:17
(12 hours ago)
.env scanning [BY]
Web App Attack
๐ฉ๐ช
LRob
2026-09-01 09:27:23
(12 hours ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.env.old (+12 more) | 2026-09-01 09:27 UTC
show less
Hacking
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-09-01 08:54:32
(13 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
FreeMyIP
2026-09-01 08:49:39
(13 hours ago)
Automated fail2ban report: web application attack / scanning for exploitable paths.
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 07:42:27
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.95.233.16 (16.233.95.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.233.16 (16.233.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:42:22.822115 2026] [security2:error] [pid 18883:tid 18883] [client 34.95.233.16:59196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frenosilent.com.ar"] [uri "/.env.example"] [unique_id "apaB3uX2shYZWZbqx9aXyAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-09-01 07:19:04
(15 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 07:13:33
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.95.233.16 (16.233.95.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.233.16 (16.233.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:13:27.741941 2026] [security2:error] [pid 24339:tid 24339] [client 34.95.233.16:57710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mirandaracewalks.com"] [uri "/.env"] [unique_id "apZ7FwBUw0XGHI13Jrg_1wAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ญ๐บ
miszterx.hu
2026-09-01 05:39:53
(16 hours ago)
XORP (haproxy): 19x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ip ...
show more
XORP (haproxy): 19x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
๐ซ๐ท
COMAITE
2026-09-01 05:08:34
(17 hours ago)
Suspicious URL access.
Web App Attack
๐ฌ๐ง
Apache
2026-09-01 04:34:36
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.95.233.16 (BR/Brazil/16.233.95.34.bc.googleu ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.233.16 (BR/Brazil/16.233.95.34.bc.googleusercontent.com): 5 in the last 300 secs
show less
Brute-Force
Web App Attack