🇺🇸
TPI-Abuse
2026-08-28 03:21:33
(53 minutes ago)
(mod_security) mod_security (id:210492) triggered by 8.235.16.57 (57.16.235.8.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 8.235.16.57 (57.16.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 23:21:25.060045 2026] [security2:error] [pid 20043:tid 20043] [client 8.235.16.57:39902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tbvfc.com"] [uri "/@fs/.env"] [unique_id "apD-tcoIv_P4AqGcMDsSiQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 02:32:20
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 8.235.16.57 (57.16.235.8.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 8.235.16.57 (57.16.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 22:32:13.705664 2026] [security2:error] [pid 2283:tid 2283] [client 8.235.16.57:43796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cyclelytz.com"] [uri "/@fs/.env"] [unique_id "apDzLTYtu0TphR5szpCDpwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-28 02:24:53
(1 hour ago)
CrowdSec ban: crowdsecurity/http-sensitive-files
Port Scan
🇺🇸
snappic
2026-08-28 01:56:09
(2 hours ago)
Scanning for config [GET /config.json.js] [Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.3 ...
show more
Scanning for config [GET /config.json.js] [Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/109.0.5457.144 Safari/537.36]
show less
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-28 01:53:37
(2 hours ago)
Restricted File Access Attempt. Matched phrase "/@fs/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 01:35:42
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 8.235.16.57 (57.16.235.8.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 8.235.16.57 (57.16.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 21:35:35.276584 2026] [security2:error] [pid 19233:tid 19233] [client 8.235.16.57:16538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.nue18.com"] [uri "/@fs/.env"] [unique_id "apDl5xDZEkx27zp55TKSDQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-08-28 01:35:06
(2 hours ago)
Web App Attack
2026-08-28 00:18:34
(3 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
2026-08-27 23:31:04
(4 hours ago)
Malicious activity detected
DDoS Attack
Bad Web Bot
Web App Attack
🇩🇰
HostingGroup
2026-08-27 23:01:54
(5 hours ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 6. First blocked: 2026-08-27.
show less
Bad Web Bot
Web App Attack
2026-08-27 22:57:12
(5 hours ago)
Bot / seems abusive / Apache connections: 64
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇪🇸
pipeline.es
2026-08-27 22:07:18
(6 hours ago)
Web scanning / probing for vulnerable paths | URL: /@vite/env | Evidence: altovolta.es 8.235.16.57 - ...
show more
Web scanning / probing for vulnerable paths | URL: /@vite/env | Evidence: altovolta.es 8.235.16.57 - - [28/Aug/2026:00:07:02 +0200] \"GET /@vite/env HTTP/1.1\" 404 207 \"-\" \"Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot) Version/18.1 Mobile/15E148 Safari/604.1\" GEOIP_COUNTRY_CODE=US | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
🇩🇪
LRob
2026-08-27 21:21:43
(6 hours ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /@fs/root/.env (+11 more) | 2026-08-27 21:21 UTC
show less
Hacking
Web App Attack
🇫🇷
dynamix
2026-08-27 21:19:43
(6 hours ago)
Multiple WAF Violations
Web App Attack
2026-08-27 21:16:41
(6 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack