🇳🇱
homeshowdomain.nl
2026-09-07 22:00:30
(21 hours ago)
Auto-ban: >3000 req/min op 2026-09-07
Web App Attack
SSH
Hacking
🇬🇧
venus.launch.bz
2026-09-07 20:36:50
(22 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.232.168.76 (US/United States/76.168. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.232.168.76 (US/United States/76.168.232.35.bc.googleusercontent.com)
show less
SQL Injection
Anonymous
2026-09-07 20:18:47
(22 hours ago)
[server.tmg.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/@fs/.env.local?raw?? | / ...
show more
[server.tmg.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/@fs/.env.local?raw?? | /@fs/.env.production?raw?? | /@fs/src/.env?raw??
show less
Hacking
Web App Attack
🇳🇱
e.fierstra
2026-09-07 20:03:04
(23 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 19:58:28
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.232.168.76 (76.168.232.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.232.168.76 (76.168.232.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:58:21.931284 2026] [security2:error] [pid 6656:tid 6656] [client 35.232.168.76:53760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.zmgmt.com"] [uri "/@fs/.env"] [unique_id "ap8XXVhC5LDNsv9RZmeABQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-07 19:37:10
(23 hours ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
agenciahypelab.com.br
2026-09-07 19:36:17
(23 hours ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-09-07 19:15:08
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.232.168.76 (76.168.232.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.232.168.76 (76.168.232.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:14:59.285950 2026] [security2:error] [pid 5605:tid 5710] [client 35.232.168.76:27590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.bestofthis.com"] [uri "/@fs/../.env"] [unique_id "ap8NMz2YA4KZBVkn7lNlsAAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-07 19:03:27
(23 hours ago)
2.200 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
Anonymous
2026-09-07 18:55:02
(1 day ago)
suspicious request in access.log
Web App Attack
🇳🇱
thedreamer.nl
2026-09-07 18:32:59
(1 day ago)
35.232.168.76 - - [07/Sep/2026:20:31:18 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 404 14 "-" "Mozilla/5. ...
show more
35.232.168.76 - - [07/Sep/2026:20:31:18 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 404 14 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" "US" "Council Bluffs" "41.25910" "-95.85170"
35.232.168.76 - - [07/Sep/2026:20:31:18 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 14 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot" "US" "Council Bluffs" "41.25910" "-95.85170"
35.232.168.76 - - [07/Sep/2026:20:31:19 +0200] "GET /@fs/.env.production?raw?? HTTP/1.1" 404 14 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" "US" "Council Bluffs" "41.25910" "-95.85170"
35.232.168.76 - - [07/Sep/2026:20:31:19 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 14 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot) Chrom
...
show less
Brute-Force
Bad Web Bot
Anonymous
2026-09-07 18:07:57
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇪
iNetWorker
2026-09-07 18:07:16
(1 day ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 18:06:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.232.168.76 (76.168.232.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.232.168.76 (76.168.232.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 14:06:04.615345 2026] [security2:error] [pid 5275:tid 5275] [client 35.232.168.76:56702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mypensees.com"] [uri "/@fs/.env.development"] [unique_id "ap79DE7egVaJwBocQbb3MgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 17:35:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.232.168.76 (76.168.232.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.232.168.76 (76.168.232.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 13:35:38.424139 2026] [security2:error] [pid 8915:tid 8915] [client 35.232.168.76:40622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.greathomesrealty.net"] [uri "/@fs/src/.env"] [unique_id "ap716lJlT-UrrPxC7bqcxgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack