๐ณ๐ฑ
Savvii
2026-06-15 12:15:26
(1 week ago)
90 attempts against mh-misbehave-ban on bean
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 10:02:16
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.134.117 (117.134.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.134.117 (117.134.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 06:02:09.683348 2026] [security2:error] [pid 22300:tid 22424] [client 34.101.134.117:53726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casademontemaior.com"] [uri "/.env.live"] [unique_id "ai_NoSnLbWQ7LG-GcK7NzgAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
spirttm
2026-06-15 06:05:09
(1 week ago)
34.101.134.117 - - [15/Jun/2026:06:05:08 +0000] "GET /.env.dev HTTP/1.1" 403 125 "-" "Mozilla/5.0 (i ...
show more
34.101.134.117 - - [15/Jun/2026:06:05:08 +0000] "GET /.env.dev HTTP/1.1" 403 125 "-" "Mozilla/5.0 (iPod; U; CPU iPhone OS 2_2_1 like Mac OS X; en-us) AppleWebKit/525.18.1 (KHTML, like Gecko) Version/3.1.1 Mobile/5H11a Safari/525.20"
34.101.134.117 - - [15/Jun/2026:06:05:08 +0000] "GET /admin/api/.env HTTP/1.1" 403 186 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.105 Safari/537.36 Vivaldi/1.0.162.9"
34.101.134.117 - - [15/Jun/2026:06:05:08 +0000] "GET /private/.env HTTP/1.1" 403 186 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
34.101.134.117 - - [15/Jun/2026:06:05:08 +0000] "GET /services/.env.production HTTP/1.1" 403 125 "-" "Mozilla/5.0 (Linux; U; Android 2.0.1; de-de; Milestone Build/SHOLS_U2_01.14.0) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.17"
34.101.134.117 - - [15/Jun/2026:06:05:08 +0000] "GET /backend/.env.old HTTP/1.1" 403 125 "-" "Mozilla/5.0 (Linux; U; Android
...
show less
Port Scan
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-06-15 04:50:05
(1 week ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ณ๐ฑ
ConsulHosting
2026-06-15 03:29:52
(1 week ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐บ๐ธ
Victor Lรณpez
2026-06-14 23:08:47
(1 week ago)
34.101.134.117 - - [14/Jun/2026:18:08:47 -0500] "GET /mailer/sendgrid.env HTTP/1.1" 404 2626 "-" "Mo ...
show more
34.101.134.117 - - [14/Jun/2026:18:08:47 -0500] "GET /mailer/sendgrid.env HTTP/1.1" 404 2626 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/604.1"
34.101.134.117 - - [14/Jun/2026:18:08:47 -0500] "GET /mail/sendgrid.env HTTP/1.1" 404 2631 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-06-14 10:34:21
(2 weeks ago)
461 requests with url.path *.env
Brute-Force
Bad Web Bot
Anonymous
2026-06-14 06:46:08
(2 weeks ago)
34.101.134.117 - - [14/Jun/2026:08:46:05 +0200] "GET /test/.env HTTP/1.1" 403 124 "-" "Wget/1.12 (fr ...
show more
34.101.134.117 - - [14/Jun/2026:08:46:05 +0200] "GET /test/.env HTTP/1.1" 403 124 "-" "Wget/1.12 (freebsd8.1)"
34.101.134.117 - - [14/Jun/2026:08:46:06 +0200] "GET /env.backup HTTP/1.1" 429 8676 "-" "Mozilla/5.0 (Linux; Android 7.1.1; CPH1801) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.101 Mobile Safari/537.36"
34.101.134.117 - - [14/Jun/2026:08:46:06 +0200] "GET /src/sendgrid.env HTTP/1.1" 429 8676 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:10.0.1) Gecko/20100101 Firefox/10.0.1"
34.101.134.117 - - [14/Jun/2026:08:46:06 +0200] "GET /app/.env.prod HTTP/1.1" 429 8676 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/538.1 (KHTML, like Gecko) QupZilla/1.9.0 Safari/538.1"
34.101.134.117 - - [14/Jun/2026:08:46:06 +0200] "GET /v1/.env HTTP/1.1" 404 3647 "-" "Opera/9.80 (Android; Opera Mini/7.6.40234/151.113; U; en) Presto/2.12.423 Version/12.16"
34.101.134.117 - - [14/Jun/2026:08:46:05 +0200] "GET /v1/.env HTTP/1.1" 404 15274 "-" "Opera/9.80 (Android; Opera Mini/7.6.40234/151.113; U
...
show less
Bad Web Bot
Web App Attack
๐จ๐ฆ
electronico
2026-06-14 06:32:43
(2 weeks ago)
34.101.134.117 - - [14/Jun/2026:17:32:42 +1100] "GET /service/.env HTTP/1.1" 404 5891 "-" "Mozilla/5 ...
show more
34.101.134.117 - - [14/Jun/2026:17:32:42 +1100] "GET /service/.env HTTP/1.1" 404 5891 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36"
34.101.134.117 - - [14/Jun/2026:17:32:42 +1100] "GET /.env.uat HTTP/1.1" 404 5891 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Safari/537.36"
34.101.134.117 - - [14/Jun/2026:17:32:42 +1100] "GET /.env.bak HTTP/1.1" 404 5891 "-" "Mozilla/5.0 (Linux; Android 9; SM-G973U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
34.101.134.117 - - [14/Jun/2026:17:32:42 +1100] "GET /backend/api/.env HTTP/1.1" 404 5891 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3880.4 Safari/537.36"
34.101.134.117 - - [14/Jun/2026:17:32:42 +1100] "GET /dev/.env HTTP/1.1" 404 5891 "-" "SAMSUNG-S8000/S8000XXIF3 SHP/VPP/R5 Jasmine/1.0 Nextreaming SMM-MMS/1.2.0 profile/MIDP-2.1
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 03:48:26
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.101.134.117 (117.134.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.134.117 (117.134.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 23:48:20.315594 2026] [security2:error] [pid 19075:tid 19075] [client 34.101.134.117:39980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pluralmatrix.net"] [uri "/development/.env"] [unique_id "ai4khAZtj_J31nUpJVMtCAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-06-14 03:15:49
(2 weeks ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-06-14 03:05:03
(2 weeks ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐ญ๐ฐ
www.winos.me
2026-06-13 19:57:03
(2 weeks ago)
Shield: Layer4 Port 9 Trap
Port Scan
Hacking