🇺🇸
136.114.160.223
10 minutes ago
[Mon Nov 02 18:27:14.155501 2026] [:error] [pid 217536:tid 217567] [client 136.114.160.223:0] [clien ...
show more
[Mon Nov 02 18:27:14.155501 2026] [:error] [pid 217536:tid 217567] [client 136.114.160.223:0] [client 136.114.160.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "justuptowngames.com"] [uri "/info.php"] [unique_id "aukcUo8ny7vxiHubGh_IowAAAQM"]
[Mon Nov 02 18:27:14.251951 2026] [:error] [pid 217536:tid 217582] [client 136.114.160.223:0] [client 136.114.160.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(
...
show less
Bad Web Bot
Web App Attack
🇺🇸
37.19.67.73
28 minutes ago
[Mon Nov 02 18:09:08.828251 2026] [:error] [pid 1541:tid 1685] [client 37.19.67.73:0] [client 37.19. ...
show more
[Mon Nov 02 18:09:08.828251 2026] [:error] [pid 1541:tid 1685] [client 37.19.67.73:0] [client 37.19.67.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "mail.uvscards.com"] [uri "/.env"] [unique_id "aukYFBoHlxoUWOIEWDYdGQAAAAc"]
[Mon Nov 02 18:09:11.792156 2026] [:error] [pid 217536:tid 217580] [client 37.19.67.73:0] [client 37.19.67.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.77.86.228
44 minutes ago
[Mon Nov 02 17:52:51.173591 2026] [:error] [pid 217536:tid 217578] [client 34.77.86.228:0] [client 3 ...
show more
[Mon Nov 02 17:52:51.173591 2026] [:error] [pid 217536:tid 217578] [client 34.77.86.228:0] [client 34.77.86.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "iwle.com"] [uri "/.env"] [unique_id "aukUQ48ny7vxiHubGh_HwAAAAQ4"]
[Mon Nov 02 17:52:51.637800 2026] [:error] [pid 1654:tid 1744] [client 34.77.86.228:0] [client 34.77.86.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.
...
show less
Bad Web Bot
Web App Attack
🇭🇰
34.92.228.207
55 minutes ago
[Mon Nov 02 17:42:13.178957 2026] [:error] [pid 1549:tid 1626] [client 34.92.228.207:0] [client 34.9 ...
show more
[Mon Nov 02 17:42:13.178957 2026] [:error] [pid 1549:tid 1626] [client 34.92.228.207:0] [client 34.92.228.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "ufscards.com"] [uri "/.env"] [unique_id "aukRxVZ6OqCAWqsA2c2dKAAAAE4"]
[Mon Nov 02 17:42:14.006655 2026] [:error] [pid 5419:tid 5465] [client 34.92.228.207:0] [client 34.92.228.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\
...
show less
Bad Web Bot
Web App Attack
🇮🇩
34.50.98.232
1 hour ago
[Mon Nov 02 17:30:29.841055 2026] [:error] [pid 217536:tid 217571] [client 34.50.98.232:0] [client 3 ...
show more
[Mon Nov 02 17:30:29.841055 2026] [:error] [pid 217536:tid 217571] [client 34.50.98.232:0] [client 34.50.98.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "ufscards.com"] [uri "/.env"] [unique_id "aukPBY8ny7vxiHubGh_GHAAAAQc"]
[Mon Nov 02 17:30:30.702064 2026] [:error] [pid 217536:tid 217580] [client 34.50.98.232:0] [client 34.50.98.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*
...
show less
Bad Web Bot
Web App Attack
🇺🇸
34.26.34.89
2 hours ago
[Mon Nov 02 16:21:15.157526 2026] [:error] [pid 217536:tid 217573] [client 34.26.34.89:0] [client 34 ...
show more
[Mon Nov 02 16:21:15.157526 2026] [:error] [pid 217536:tid 217573] [client 34.26.34.89:0] [client 34.26.34.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "uvscards.com"] [uri "/.env"] [unique_id "auj-y48ny7vxiHubGh_EaAAAAQk"]
[Mon Nov 02 16:21:15.270879 2026] [:error] [pid 5419:tid 5454] [client 34.26.34.89:0] [client 34.26.34.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.
...
show less
Bad Web Bot
Web App Attack
🇦🇺
34.116.103.118
2 hours ago
[Mon Nov 02 16:09:49.308430 2026] [:error] [pid 217536:tid 217586] [client 34.116.103.118:0] [client ...
show more
[Mon Nov 02 16:09:49.308430 2026] [:error] [pid 217536:tid 217586] [client 34.116.103.118:0] [client 34.116.103.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "uvscards.com"] [uri "/.env"] [unique_id "auj8HY8ny7vxiHubGh_EKQAAARY"]
[Mon Nov 02 16:09:50.076020 2026] [:error] [pid 217536:tid 217566] [client 34.116.103.118:0] [client 34.116.103.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\
...
show less
Bad Web Bot
Web App Attack
🇦🇺
34.129.57.140
3 hours ago
[Mon Nov 02 14:49:46.824846 2026] [:error] [pid 1541:tid 1720] [client 34.129.57.140:39814] [client ...
show more
[Mon Nov 02 14:49:46.824846 2026] [:error] [pid 1541:tid 1720] [client 34.129.57.140:39814] [client 34.129.57.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "app.iwle.com"] [uri "/.env"] [unique_id "aujpWhoHlxoUWOIEWDYZ1AAAABI"]
[Mon Nov 02 14:49:48.125550 2026] [:error] [pid 1549:tid 1606] [client 34.129.57.140:39818] [client 34.129.57.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[
...
show less
Bad Web Bot
Web App Attack
🇩🇪
35.198.124.242
4 hours ago
[Mon Nov 02 14:29:40.465238 2026] [:error] [pid 1654:tid 1749] [client 35.198.124.242:0] [client 35. ...
show more
[Mon Nov 02 14:29:40.465238 2026] [:error] [pid 1654:tid 1749] [client 35.198.124.242:0] [client 35.198.124.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "www.iwle.com"] [uri "/.env.prod.bak"] [unique_id "aujkpEMNb-ME0WnUOmVuUQAAAIs"]
[Mon Nov 02 14:29:40.485084 2026] [:error] [pid 5419:tid 5453] [client 35.198.124.242:0] [client 35.198.124.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\
...
show less
Bad Web Bot
Web App Attack
🇰🇷
34.64.68.184
5 hours ago
[Mon Nov 02 13:33:35.206469 2026] [:error] [pid 1541:tid 1686] [client 34.64.68.184:0] [client 34.64 ...
show more
[Mon Nov 02 13:33:35.206469 2026] [:error] [pid 1541:tid 1686] [client 34.64.68.184:0] [client 34.64.68.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "webmail.iwle.com"] [uri "/.env"] [unique_id "aujXfxoHlxoUWOIEWDYY8wAAAAg"]
[Mon Nov 02 13:33:35.969453 2026] [:error] [pid 5419:tid 5457] [client 34.64.68.184:0] [client 34.64.68.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\
...
show less
Bad Web Bot
Web App Attack
🇺🇸
34.21.93.117
5 hours ago
[Mon Nov 02 13:12:05.148483 2026] [:error] [pid 1654:tid 1762] [client 34.21.93.117:39892] [client 3 ...
show more
[Mon Nov 02 13:12:05.148483 2026] [:error] [pid 1654:tid 1762] [client 34.21.93.117:39892] [client 34.21.93.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "mail.app.iwle.com"] [uri "/.env"] [unique_id "aujSdUMNb-ME0WnUOmVtBgAAAJg"]
[Mon Nov 02 13:12:05.282613 2026] [:error] [pid 5419:tid 5455] [client 34.21.93.117:39896] [client 34.21.93.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.
...
show less
Bad Web Bot
Web App Attack
🇮🇳
34.93.229.238
5 hours ago
[Mon Nov 02 13:08:23.108873 2026] [:error] [pid 1549:tid 1603] [client 34.93.229.238:0] [client 34.9 ...
show more
[Mon Nov 02 13:08:23.108873 2026] [:error] [pid 1549:tid 1603] [client 34.93.229.238:0] [client 34.93.229.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "uvscards.com"] [uri "/.env"] [unique_id "aujRl1Z6OqCAWqsA2c2ZkgAAAEQ"]
[Mon Nov 02 13:08:24.228952 2026] [:error] [pid 1541:tid 1678] [client 34.93.229.238:0] [client 34.93.229.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\
...
show less
Bad Web Bot
Web App Attack
🇮🇩
34.50.120.114
5 hours ago
[Mon Nov 02 12:39:51.316463 2026] [:error] [pid 1549:tid 1650] [client 34.50.120.114:0] [client 34.5 ...
show more
[Mon Nov 02 12:39:51.316463 2026] [:error] [pid 1549:tid 1650] [client 34.50.120.114:0] [client 34.50.120.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "www.iwle.com"] [uri "/.env"] [unique_id "aujK51Z6OqCAWqsA2c2Y1gAAAFY"]
[Mon Nov 02 12:39:52.177190 2026] [:error] [pid 1541:tid 1693] [client 34.50.120.114:0] [client 34.50.120.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.52.152.34
5 hours ago
[Mon Nov 02 12:38:17.239795 2026] [:error] [pid 1654:tid 1742] [client 34.52.152.34:35104] [client 3 ...
show more
[Mon Nov 02 12:38:17.239795 2026] [:error] [pid 1654:tid 1742] [client 34.52.152.34:35104] [client 34.52.152.34] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "app.iwle.com"] [uri "/.aws/credentials"] [unique_id "aujKiUMNb-ME0WnUOmVr0QAAAIQ"]
[Mon Nov 02 12:38:17.239798 2026] [:error] [pid 1654:tid 1760] [client 34.52.152.34:35130] [client 34.52.152.34] ModSecurity: Warning. Matched phrase ".boto" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APP
...
show less
Web App Attack
Brute-Force
🇧🇪
34.156.214.223
6 hours ago
[Mon Nov 02 12:27:47.230846 2026] [:error] [pid 5419:tid 5467] [client 34.156.214.223:0] [client 34. ...
show more
[Mon Nov 02 12:27:47.230846 2026] [:error] [pid 5419:tid 5467] [client 34.156.214.223:0] [client 34.156.214.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "justuptowngames.com"] [uri "/info.php"] [unique_id "aujIE9JvUmw7p6OASG6Q3wAAANQ"]
[Mon Nov 02 12:27:47.689914 2026] [:error] [pid 5419:tid 5463] [client 34.156.214.223:0] [client 34.156.214.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?
...
show less
Bad Web Bot
Web App Attack
🇲🇽
38.22.170.10
6 hours ago
2026-11-02T12:04:22.340804 main.justuptowngames.com sshd-session[36837]: Invalid user ansible from 3 ...
show more
2026-11-02T12:04:22.340804 main.justuptowngames.com sshd-session[36837]: Invalid user ansible from 38.22.170.10 port 37398
2026-11-02T12:09:42.156608 main.justuptowngames.com sshd-session[41250]: Invalid user user from 38.22.170.10 port 52800
2026-11-02T12:14:55.674422 main.justuptowngames.com sshd-session[45682]: Invalid user san from 38.22.170.10 port 34000
2026-11-02T12:16:14.485908 main.justuptowngames.com sshd-session[46755]: Invalid user crmadmin from 38.22.170.10 port 53560
2026-11-02T12:17:35.109818 main.justuptowngames.com sshd-session[47777]: Invalid user bb from 38.22.170.10 port 46504
...
show less
Brute-Force
SSH
🇵🇱
45.138.12.51
6 hours ago
[Mon Nov 02 11:43:01.903863 2026] [:error] [pid 1654:tid 1748] [client 45.138.12.51:36518] [client 4 ...
show more
[Mon Nov 02 11:43:01.903863 2026] [:error] [pid 1654:tid 1748] [client 45.138.12.51:36518] [client 45.138.12.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "63.141.255.191"] [uri "/build/.env"] [unique_id "aui9lUMNb-ME0WnUOmVrNwAAAIo"]
[Mon Nov 02 11:43:02.406172 2026] [:error] [pid 1654:tid 1754] [client 45.138.12.51:36548] [client 45.138.12.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\
...
show less
Bad Web Bot
Web App Attack
🇩🇪
20.218.73.251
6 hours ago
[Mon Nov 02 11:39:24.475633 2026] [:error] [pid 5419:tid 5462] [client 20.218.73.251:8217] [client 2 ...
show more
[Mon Nov 02 11:39:24.475633 2026] [:error] [pid 5419:tid 5462] [client 20.218.73.251:8217] [client 20.218.73.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)^/(?:wp-admin(?:/|$)|wp-content(?:/|$)|wp-includes(?:/|$)|wp-login\\\\.php$|wp-editor\\\\.php$|wp-mail\\\\.php$|xmlrpc\\\\.php$)" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "152"] [id "100114"] [msg "Local Policy: WordPress probe on non-WordPress site"] [severity "WARNING"] [tag "local/wordpress-probe"] [hostname "_dc-mx.ffebd9235534.justuptowngames.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aui8vNJvUmw7p6OASG6QAAAAAM8"]
[Mon Nov 02 11:39:25.931582 2026] [:error] [pid 5419:tid 5449] [client 20.218.73.251:8273] [client 20.218.73.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)^/(?:wp-admin(?:/|$)|wp-content(?:/|$)|wp-includes(?:/|$)|wp-login\\\\.php$|wp-editor\\\\.php$|wp-mail\\\\.php$|xmlrpc\\\\.php
...
show less
Bad Web Bot
Web App Attack
🇨🇦
34.130.164.194
6 hours ago
[Mon Nov 02 11:40:01.215075 2026] [:error] [pid 1541:tid 1719] [client 34.130.164.194:0] [client 34. ...
show more
[Mon Nov 02 11:40:01.215075 2026] [:error] [pid 1541:tid 1719] [client 34.130.164.194:0] [client 34.130.164.194] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "autoconfig.iwle.com"] [uri "/.git/config"] [unique_id "aui84RoHlxoUWOIEWDYWUQAAABE"]
[Mon Nov 02 11:40:04.710807 2026] [:error] [pid 1541:tid 1677] [client 34.130.164.194:0] [client 34.130.164.194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.con
...
show less
Web App Attack
Brute-Force
🇦🇺
34.40.151.183
7 hours ago
[Mon Nov 02 11:24:30.972449 2026] [:error] [pid 310558:tid 310656] [client 34.40.151.183:0] [client ...
show more
[Mon Nov 02 11:24:30.972449 2026] [:error] [pid 310558:tid 310656] [client 34.40.151.183:0] [client 34.40.151.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "uvscards.com"] [uri "/.env"] [unique_id "aui5PsP7WXZVVsFwaN5uGQAAAIo"]
[Mon Nov 02 11:24:31.747855 2026] [:error] [pid 310698:tid 310733] [client 34.40.151.183:0] [client 34.40.151.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.22.195.149
7 hours ago
[Mon Nov 02 11:22:04.459963 2026] [:error] [pid 310494:tid 310597] [client 34.22.195.149:0] [client ...
show more
[Mon Nov 02 11:22:04.459963 2026] [:error] [pid 310494:tid 310597] [client 34.22.195.149:0] [client 34.22.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "iwle.com"] [uri "/.env"] [unique_id "aui4rGcnvzuoZ5_fhlzIdwAAABQ"]
[Mon Nov 02 11:22:05.001117 2026] [:error] [pid 310558:tid 310659] [client 34.22.195.149:0] [client 34.22.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*
...
show less
Bad Web Bot
Web App Attack
🇺🇸
35.237.235.205
7 hours ago
[Mon Nov 02 11:14:42.967486 2026] [:error] [pid 310558:tid 310670] [client 35.237.235.205:0] [client ...
show more
[Mon Nov 02 11:14:42.967486 2026] [:error] [pid 310558:tid 310670] [client 35.237.235.205:0] [client 35.237.235.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "autodiscover.iwle.com"] [uri "/.env"] [unique_id "aui28sP7WXZVVsFwaN5tuAAAAJg"]
[Mon Nov 02 11:14:43.044824 2026] [:error] [pid 323614:tid 323646] [client 35.237.235.205:0] [client 35.237.235.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.62.82.207
7 hours ago
[Mon Nov 02 11:07:11.843269 2026] [:error] [pid 323614:tid 323661] [client 34.62.82.207:57120] [clie ...
show more
[Mon Nov 02 11:07:11.843269 2026] [:error] [pid 323614:tid 323661] [client 34.62.82.207:57120] [client 34.62.82.207] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mta-sts.iwle.com"] [uri "/.aws/credentials"] [unique_id "aui1LwbmUdopWDmoYbt72gAAARM"]
[Mon Nov 02 11:07:11.851509 2026] [:error] [pid 310698:tid 310733] [client 34.62.82.207:57138] [client 34.62.82.207] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activate
...
show less
Web App Attack
Brute-Force
🇺🇸
84.233.199.147
7 hours ago
[Mon Nov 02 11:06:38.819434 2026] [:error] [pid 323614:tid 323658] [client 84.233.199.147:64358] [cl ...
show more
[Mon Nov 02 11:06:38.819434 2026] [:error] [pid 323614:tid 323658] [client 84.233.199.147:64358] [client 84.233.199.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "www.app.iwle.com"] [uri "/phpinfo.php"] [unique_id "aui1DgbmUdopWDmoYbt70wAAARA"]
[Mon Nov 02 11:06:40.035922 2026] [:error] [pid 310558:tid 310670] [client 84.233.199.147:54847] [client 84.233.199.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^
...
show less
Bad Web Bot
Web App Attack
🇺🇸
34.75.253.16
7 hours ago
[Mon Nov 02 11:01:33.984895 2026] [:error] [pid 310558:tid 310668] [client 34.75.253.16:0] [client 3 ...
show more
[Mon Nov 02 11:01:33.984895 2026] [:error] [pid 310558:tid 310668] [client 34.75.253.16:0] [client 34.75.253.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "dashboard.iwle.com"] [uri "/js../.env"] [unique_id "auiz3cP7WXZVVsFwaN5tbQAAAJY"]
[Mon Nov 02 11:01:33.987453 2026] [:error] [pid 310698:tid 310726] [client 34.75.253.16:0] [client 34.75.253.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?
...
show less
Bad Web Bot
Web App Attack