🇧🇾
lns.bz
2026-10-16 16:31:35
(37 minutes ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 15:33:28
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.241.80.205 (205.80.241.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.80.205 (205.80.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:33:22.369998 2026] [security2:error] [pid 14284:tid 14284] [client 35.241.80.205:60752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.smoothiegirl.benshermanguitar.com"] [uri "/.git/config"] [unique_id "atJDwtzO_taqVORUS_pBBQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
Bay13
2026-10-16 15:23:57
(1 hour ago)
CrowdSec:custom/modsecurity
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 14:08:35
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.241.80.205 (205.80.241.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.80.205 (205.80.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:08:32.339295 2026] [security2:error] [pid 6697:tid 6697] [client 35.241.80.205:60920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.smokecooler.com.stlouisdave.com"] [uri "/.git/config"] [unique_id "atIv4OnfGEXw4uzE6aSbOQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-10-16 13:55:59
(3 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇬🇧
bensmithurst
2026-10-16 12:17:39
(4 hours ago)
2026/10/16 12:17:35 [error] 2468327#2468327: *26636 open() "/var/www/parked/mailer/.env" failed (2: ...
show more
2026/10/16 12:17:35 [error] 2468327#2468327: *26636 open() "/var/www/parked/mailer/.env" failed (2: No such file or directory), client: 35.241.80.205, server: www.smithurst.uk, request: "GET /mailer/.env HTTP/1.0", host: "www.smithurst.uk"
2026/10/16 12:17:35 [error] 2468327#2468327: *26638 open() "/var/www/parked/mail/.env" failed (2: No such file or directory), client: 35.241.80.205, server: www.smithurst.uk, request: "GET /mail/.env HTTP/1.0", host: "www.smithurst.uk"
2026/10/16 12:17:36 [error] 2468327#2468327: *26644 open() "/var/www/parked/mailing/.env" failed (2: No such file or directory), client: 35.241.80.205, server: www.smithurst.uk, request: "GET /mailing/.env HTTP/1.0", host: "www.smithurst.uk"
2026/10/16 12:17:38 [error] 2468328#2468328: *26664 open() "/var/www/parked/mailgun/.env" failed (2: No such file or directory), client: 35.241.80.205, server: www.smithurst.uk, request: "GET /mailgun/.env HTTP/1.0", host: "www.smithurst.uk"
2026/10/16 12:17:39 [error] 2468328#2468
... [host=CER***]
show less
Web App Attack
🇨🇭
YF
2026-10-16 11:37:17
(5 hours ago)
Environment file probe
Web App Attack
🇨🇭
zynex
2026-10-16 11:26:29
(5 hours ago)
URL Probing: /.env
Web App Attack
🇳🇱
Site.eu
2026-10-16 11:19:31
(5 hours ago)
Excessive multi-domain requests
Brute-Force
🇦🇺
screwlooseit.com.au
2026-10-16 11:12:41
(5 hours ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
205.80.241.35.bc.googleusercontent.com
Web App Attack
🇬🇧
consul.to
2026-10-16 11:08:54
(6 hours ago)
Web attack/malicious scanning detected
Web App Attack
2026-10-16 09:05:04
(8 hours ago)
Bot / scanning and/or hacking attempts: GET /.env2 HTTP/1.1, GET /.env~ HTTP/1.1, GET /site/.env HTT ...
show more
Bot / scanning and/or hacking attempts: GET /.env2 HTTP/1.1, GET /.env~ HTTP/1.1, GET /site/.env HTTP/1.1, GET /web/.env HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /.env.swp HTTP/1.1, GET /.env.yml HTTP/1.1, GET /.env_copy HTTP/1.1, GET /.env1 HTTP/1.1, GET /api/.env HTTP/1.1, GET /apps/.env HTTP/1.1, GET /.env.json HTTP/1.1, GET /app/.env HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.txt HTTP/1.1, GET /.env.yaml HTTP/1.1, GET /.env.live HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.dist HTTP/1.1
show less
Hacking
Web App Attack
🇸🇪
vaia.cloud
2026-10-16 07:35:02
(9 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
2026-10-16 07:20:02
(9 hours ago)
suspicious request in access.log
Web App Attack
🇳🇱
Site.eu
2026-10-16 06:55:06
(10 hours ago)
Excessive 404/403 errors
Brute-Force