🇳🇱
homeshowdomain.nl
2026-08-01 22:00:18
(10 hours ago)
Auto-ban: >3000 req/min op 2026-08-01
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-01 17:24:28
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.199.74.78 (78.74.199.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.199.74.78 (78.74.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:24:20.452666 2026] [security2:error] [pid 2037546:tid 2037546] [client 35.199.74.78:45660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bigislandhawaiirealty.com.kh6jim.com"] [uri "/.env.production"] [unique_id "am4rxHJlNcYhiRLnFLdAFwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-01 16:13:07
(16 hours ago)
[ssd5.kdns.gr] httpd-config-scan: sites=www.blossombeauty.gr; logs=/var/log/httpd/domains/blossombea ...
show more
[ssd5.kdns.gr] httpd-config-scan: sites=www.blossombeauty.gr; logs=/var/log/httpd/domains/blossombeauty.gr.log; samples=/.env | /.env.backup | /.env.old
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 16:05:23
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.199.74.78 (78.74.199.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.199.74.78 (78.74.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:05:19.019606 2026] [security2:error] [pid 2457440:tid 2457440] [client 35.199.74.78:37242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thebackyard.jbaydeliveries.com"] [uri "/.env.save"] [unique_id "am4ZPwW5r0cbpbTv6eJoWAAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
inlink.ltd
2026-08-01 16:04:07
(16 hours ago)
dot file probe
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 15:44:49
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.199.74.78 (78.74.199.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.199.74.78 (78.74.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:44:42.813345 2026] [security2:error] [pid 576223:tid 576223] [client 35.199.74.78:37924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sierrafoothillswinemap.georgetownca.com"] [uri "/.env.bak"] [unique_id "am4UavR8SbXhEFd46YSQAQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-01 14:43:19
(17 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
2026-08-01 14:28:54
(18 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
2026-08-01 14:05:39
(18 hours ago)
35.199.74.78 detected and blocked by apache-modsecurity after 1 try
Brute-Force
🇺🇸
TPI-Abuse
2026-08-01 13:44:16
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.199.74.78 (78.74.199.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.199.74.78 (78.74.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 09:44:09.721133 2026] [security2:error] [pid 4153840:tid 4153840] [client 35.199.74.78:32834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pcga.golf"] [uri "/.env.local"] [unique_id "am34KR_gwxLGZc-ihu01rAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
hidemail.app
2026-08-01 13:28:38
(19 hours ago)
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto ...
show more
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban.
show less
Web App Attack
Hacking
🇮🇹
clamehost.it
2026-08-01 13:28:11
(19 hours ago)
Automatic report - Brute Force attack using this IP address
Brute-Force
🇩🇪
4server
2026-08-01 13:24:34
(19 hours ago)
[SatAug0115:24:27.9467042026][security2:error][pid1564874:tid1564946][client35.199.74.78:0]ModSecuri ...
show more
[SatAug0115:24:27.9467042026][security2:error][pid1564874:tid1564946][client35.199.74.78:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"restaurantgandria.ch\"][uri\"/.env.bak\"][unique_id\"am3zi-x41xcnL0noih91xwAAAIo\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 12:59:43
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.199.74.78 (78.74.199.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.199.74.78 (78.74.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 08:59:38.714516 2026] [security2:error] [pid 11536:tid 11536] [client 35.199.74.78:42582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.networkzone.org.convoyforkids.com"] [uri "/.env"] [unique_id "am3tuiG7ZF6pnDG5St3qZwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-08-01 12:39:08
(20 hours ago)
Multiple WAF Violations
Web App Attack