🇩🇪
Phenix Info
2026-09-06 06:32:19
(10 hours ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 03:33:34
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.228.15.116 (116.15.228.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.15.116 (116.15.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:33:30.933958 2026] [security2:error] [pid 19495:tid 19495] [client 35.228.15.116:54570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plasterprose.com"] [uri "/.env.backup"] [unique_id "apzfCkWyyk_YsWkMKhPh4wAAAHQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:35:44
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.228.15.116 (116.15.228.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.15.116 (116.15.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:35:36.756451 2026] [security2:error] [pid 32386:tid 32386] [client 35.228.15.116:53076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrpinman.com"] [uri "/.env.local"] [unique_id "apzDaJxtJFnVH8AMQ_wWwgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-06 01:11:08
(16 hours ago)
(mod_security) mod_security (id:949110) triggered by 35.228.15.116 (FI/Finland/116.15.228.35.bc.goog ...
show more
(mod_security) mod_security (id:949110) triggered by 35.228.15.116 (FI/Finland/116.15.228.35.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇨🇭
zynex
2026-09-06 00:31:54
(17 hours ago)
URL Probing: /backup.tar.gz
Web App Attack
🇹🇼
kk_it_man
2026-09-06 00:23:01
(17 hours ago)
ET INFO Request to Hidden Environment File - Inbound
ET WEB_SERVER Tilde in URI - potential .php~ ...
show more
ET INFO Request to Hidden Environment File - Inbound
ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability
show less
Port Scan
🇩🇪
XICTRON
2026-09-06 00:20:08
(17 hours ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
Anonymous
2026-09-06 00:08:21
(17 hours ago)
[osotir.org] httpd-config-scan: sites=www.orthodoxpublications.com; logs=/var/log/httpd/domains/orth ...
show more
[osotir.org] httpd-config-scan: sites=www.orthodoxpublications.com; logs=/var/log/httpd/domains/orthodoxpublications.com.log; samples=/.env.prod | /.env.example | /.env.dev
show less
Hacking
Web App Attack
🇫🇷
dynamix
2026-09-05 23:21:56
(18 hours ago)
Multiple WAF Violations
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-05 23:04:25
(18 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇳🇱
e.fierstra
2026-09-05 23:04:05
(18 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 22:55:44
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.228.15.116 (116.15.228.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.15.116 (116.15.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:55:40.667410 2026] [security2:error] [pid 3959:tid 3959] [client 35.228.15.116:57856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.goikopro.com"] [uri "/.env"] [unique_id "apyd7NDMiymW15ZswRoV2wAAAGg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-05 22:32:20
(18 hours ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.env.example (+10 more) | 2026-09-05 22:32 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 22:11:32
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.228.15.116 (116.15.228.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.15.116 (116.15.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:11:25.487505 2026] [security2:error] [pid 23696:tid 23718] [client 35.228.15.116:46932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.dpiazza.com"] [uri "/.env.dev"] [unique_id "apyTjUqgQ3jqkQdLLG63cgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 21:31:40
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.228.15.116 (116.15.228.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.15.116 (116.15.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 17:31:35.949009 2026] [security2:error] [pid 18179:tid 18179] [client 35.228.15.116:33828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internationalavionics.com"] [uri "/.env.backup"] [unique_id "apyKNwfB4UaPcA1wbwI3ygAAAGU"]
show less
Brute-Force
Bad Web Bot
Web App Attack