๐ญ๐บ
miszterx.hu
2026-09-01 05:39:54
(3 hours ago)
XORP (haproxy): 3x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ipt ...
show more
XORP (haproxy): 3x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-01 05:23:32
(3 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 04:41:44
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:41:39.616091 2026] [security2:error] [pid 27787:tid 27787] [client 34.97.186.145:37062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hillconsultants.alhill.com"] [uri "/.env"] [unique_id "apZXg7v2lQYrcyR1LeN4TAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 04:26:37
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:26:33.726667 2026] [security2:error] [pid 7756:tid 7756] [client 34.97.186.145:57674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bodyworkbydallas.com"] [uri "/.env.production"] [unique_id "apZT-ZbtkQpruBX3IuOoZQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
antlac1
2026-09-01 04:26:21
(4 hours ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 03:50:31
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 23:50:27.133917 2026] [security2:error] [pid 24619:tid 24619] [client 34.97.186.145:60086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anthonyanimalclinic.net"] [uri "/.env.local"] [unique_id "apZLg43aftX-VbqUwAsBAAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-09-01 03:44:41
(5 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 03:02:38
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 23:02:30.102365 2026] [security2:error] [pid 26580:tid 26580] [client 34.97.186.145:46030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jonesypop.com"] [uri "/.env.prod"] [unique_id "apZARv1xFcd3eumacv0zUgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-09-01 02:59:49
(6 hours ago)
Aggressive scanning resulting into 404
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-01 02:39:15
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:39:09.343649 2026] [security2:error] [pid 13640:tid 13640] [client 34.97.186.145:54390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "balay.pamplonaserviciotecnico.com"] [uri "/.env.example"] [unique_id "apY6zdX2dg--DI4w8OmfwwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 02:14:58
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:14:50.243484 2026] [security2:error] [pid 27359:tid 27359] [client 34.97.186.145:53712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grampys.toys"] [uri "/.env.bak"] [unique_id "apY1GknR1G5uRjlZPHGNHgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 00:56:51
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:56:46.587716 2026] [security2:error] [pid 17838:tid 17838] [client 34.97.186.145:42632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "demberdatabase.com"] [uri "/wp-config.php.bak"] [unique_id "apYizqqefcmjORZzvpjkggAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 00:14:05
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:13:58.543992 2026] [security2:error] [pid 8127:tid 8127] [client 34.97.186.145:51018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cognicom.com"] [uri "/.env.backup"] [unique_id "apYYxoZ-a9_wuepIErUX1QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 23:52:39
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.186.145 (145.186.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 19:52:33.778077 2026] [security2:error] [pid 31931:tid 31931] [client 34.97.186.145:53154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "comparevision.com"] [uri "/wp-config.php.swp"] [unique_id "apYTwcuQ8syb9FX0e2bMWAAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-31 23:07:03
(9 hours ago)
Automated web scanner. Requested suspicious paths: /.env.dev | /env | /.env.local | /storage/logs/la ...
show more
Automated web scanner. Requested suspicious paths: /.env.dev | /env | /.env.local | /storage/logs/laravel.log | /actuator/configprops | /.env.example | /_ignition/health-check | /.env | /.env.production | /.env.backup | /.env.save | /.env.bak | /.env.old | /actuator/env | /crusader-404-probe, /.env.prod | /env | /.env.local | /storage/logs/laravel.log | /actuator/configprops | /.env.example | /_ignition/health-check | /.env | /.env.production | /.env.backup | /.env.save | /.env.bak | /.env.old | /actuator/env | /crusader-404-probe. UTC: 2026-08-31 21:56:53.
show less
Web App Attack