🇮🇹
VHosting
2026-10-17 05:00:05
(1 hour ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇮🇩
Burayot
2026-10-17 04:49:00
(1 hour ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.237.0.55 (US/United States/55.0.2 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.237.0.55 (US/United States/55.0.237.35.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
🇲🇾
Rizzy
2026-10-17 04:19:09
(1 hour ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 04:12:22
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.237.0.55 (55.0.237.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.0.55 (55.0.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 00:12:16.021075 2026] [security2:error] [pid 22929:tid 22929] [client 35.237.0.55:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.area52designs.com"] [uri "/public../.env"] [unique_id "atL1oAST3r-lLbvbxfvkagAAAD4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
IVski.com
2026-10-17 00:40:15
(5 hours ago)
IVski WAF | Sensitive file probe detected - looking for .env
Hacking
Brute-Force
Web App Attack
🇦🇺
clapper
2026-10-16 15:49:39
(14 hours ago)
(mod_security) mod_security (id:980001) triggered by 35.237.0.55 (US/United States/55.0.237.35.bc.go ...
show more
(mod_security) mod_security (id:980001) triggered by 35.237.0.55 (US/United States/55.0.237.35.bc.googleusercontent.com): 5 in the last 3600 secs; ID: Clar
show less
Brute-Force
Bad Web Bot
🇺🇸
WizardsToolkit
2026-10-16 15:01:42
(15 hours ago)
attempted to access /@fs/app/.env?raw??
Web App Attack
🇫🇷
kayzo
2026-10-16 12:22:22
(17 hours ago)
Vulnerability probe against hosting control panel: POST /api/graphql
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-10-16 12:03:54
(18 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: prometheus.budyn.ovh | URI: /.env.local::$DATA?raw | UA: Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-16 09:59:33
(20 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
jormaster3k
2026-10-16 06:57:57
(23 hours ago)
Attack against Apache (too many 404s)
Web App Attack
🇵🇱
Budyn
2026-10-16 06:39:06
(23 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jenkins.budyn.ovh | URI: /dist/.vite/manifest.json | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇭🇺
kranem
2026-10-16 06:00:06
(1 day ago)
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (POS ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (POST method)
Endpoint: /icecoder/lib/file-control.php
Timestamp: 2026-10-16T05:18:51Z
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
show less
Bad Web Bot
🇧🇪
cmbplf
2026-10-16 05:40:08
(1 day ago)
146 requests with url.path */proc/*
Brute-Force
Bad Web Bot
🇷🇴
clauss
2026-10-16 05:19:37
(1 day ago)
35.237.0.55 - - [16/Oct/2026:08:19:36 +0300] "GET /api/.env/public/.env HTTP/2.0" 403 166 "-" "Mozil ...
show more
35.237.0.55 - - [16/Oct/2026:08:19:36 +0300] "GET /api/.env/public/.env HTTP/2.0" 403 166 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.237.0.55 - - [16/Oct/2026:08:19:36 +0300] "GET /.env.save HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
Web App Attack