🇳🇱
homeshowdomain.nl
2026-08-01 22:00:25
(40 minutes ago)
Auto-ban: >3000 req/min op 2026-08-01
Web App Attack
SSH
Hacking
2026-08-01 18:02:19
(4 hours ago)
Web attack
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 17:25:34
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.244.92.10 (10.92.244.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.92.10 (10.92.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:25:28.922362 2026] [security2:error] [pid 2630884:tid 2630884] [client 35.244.92.10:38994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelkivisto.com"] [uri "/.env.local"] [unique_id "am4sCCIZhxEybMoV86wmTAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 17:06:46
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.244.92.10 (10.92.244.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.92.10 (10.92.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:06:42.163312 2026] [security2:error] [pid 28440:tid 28440] [client 35.244.92.10:52470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bluebirds.bickleton.org"] [uri "/.env.dev"] [unique_id "am4novsDm8tg93UvMzAE_wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-01 17:00:59
(5 hours ago)
$f2bV_matches
Brute-Force
🇳🇱
BlueWire Hosting
2026-08-01 16:15:02
(6 hours ago)
Probing websites for vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 15:21:17
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.244.92.10 (10.92.244.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.92.10 (10.92.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:21:08.443180 2026] [security2:error] [pid 2876096:tid 2876096] [client 35.244.92.10:35514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newcitypark.com"] [uri "/.env.dev"] [unique_id "am4O5IQPUocgRMsVqHE9mgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-01 15:07:05
(7 hours ago)
Automated web scanner. Requested suspicious paths: /.env.prod | /.env.backup | /.env.production | /. ...
show more
Automated web scanner. Requested suspicious paths: /.env.prod | /.env.backup | /.env.production | /.env.example | /.env | /.env.local | /.env.save | /.env.old | /.env.dev | /.env.bak. UTC: 2026-08-01 14:50:38.
show less
Web App Attack
🇿🇦
conure
2026-08-01 14:28:01
(8 hours ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s
Web App Attack
🇹🇭
thaizone.com
2026-08-01 14:21:51
(8 hours ago)
Brute Force Attack on a Web Resources (repeated 404) #1
DDoS Attack
Web Spam
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 14:19:16
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.244.92.10 (10.92.244.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.92.10 (10.92.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:19:11.635846 2026] [security2:error] [pid 4001713:tid 4001713] [client 35.244.92.10:49530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.isyourcompanysafe.com"] [uri "/.env"] [unique_id "am4AXyQGjEU9-4wMINb82AAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-01 14:12:50
(8 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-08-01 14:08:02
(8 hours ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice02]
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-08-01 13:59:36
(8 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
dtorrer
2026-08-01 13:55:39
(8 hours ago)
General vulnerability scan.
Port Scan