🇺🇸
IndigoRidge
2026-09-16 10:56:07
(50 minutes ago)
34.104.248.39 - - [16/Sep/2026:06:56:01 -0400] "GET /.env HTTP/1.1" 404 50939 "https://www.google.co ...
show more
34.104.248.39 - - [16/Sep/2026:06:56:01 -0400] "GET /.env HTTP/1.1" 404 50939 "https://www.google.com/" "Mozilla/5.0 (Windows; U; MSIE 6.1; Windows NT 6.3; .NET CLR 1.1.25934; WOW64)"
34.104.248.39 - - [16/Sep/2026:06:56:04 -0400] "GET /vendor/.env HTTP/1.1" 404 50939 "https://www.google.com/" "Mozilla/5.0 (Windows; U; MSIE 6.1; Windows NT 6.3; .NET CLR 1.1.25934; WOW64)"
34.104.248.39 - - [16/Sep/2026:06:56:05 -0400] "GET /lib/.env HTTP/1.1" 404 50939 "https://www.google.com/" "Mozilla/5.0 (Windows; U; MSIE 6.1; Windows NT 6.3; .NET CLR 1.1.25934; WOW64)"
...
show less
Web App Attack
🇫🇷
masterguru
2026-09-16 08:48:56
(2 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇬🇧
consul.to
2026-09-16 08:23:13
(3 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
IndigoRidge
2026-09-16 08:06:19
(3 hours ago)
34.104.248.39 - - [16/Sep/2026:04:06:14 -0400] "GET /.env HTTP/1.1" 404 50939 "https://www.google.co ...
show more
34.104.248.39 - - [16/Sep/2026:04:06:14 -0400] "GET /.env HTTP/1.1" 404 50939 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 6.1; Windows NT 10.0; .NET CLR 1.3.11467; Win64; x64)"
34.104.248.39 - - [16/Sep/2026:04:06:17 -0400] "GET /vendor/.env HTTP/1.1" 404 50939 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 6.1; Windows NT 10.0; .NET CLR 1.3.11467; Win64; x64)"
34.104.248.39 - - [16/Sep/2026:04:06:18 -0400] "GET /lib/.env HTTP/1.1" 404 50939 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 6.1; Windows NT 10.0; .NET CLR 1.3.11467; Win64; x64)"
...
show less
Web App Attack
2026-09-16 04:32:25
(7 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-09-16 01:49:18
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.248.39 (39.248.104.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.248.39 (39.248.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:49:11.718532 2026] [security2:error] [pid 26509:tid 26509] [client 34.104.248.39:43504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leothecolorman.com"] [uri "/.env"] [unique_id "aqn1l7cG2MW1G2TpHIILWgAAAAE"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 17:54:02
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.248.39 (39.248.104.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.248.39 (39.248.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:53:56.441402 2026] [security2:error] [pid 21515:tid 21515] [client 34.104.248.39:57132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "easy2surf.com"] [uri "/.env"] [unique_id "aqmGNIsqiFOQjOC1QfkYcgAAAAE"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-15 16:03:54
(19 hours ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-09-15 14:54:04
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.248.39 (39.248.104.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.248.39 (39.248.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 10:53:58.838284 2026] [security2:error] [pid 21945:tid 21945] [client 34.104.248.39:58572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cosplayculture.com"] [uri "/.env"] [unique_id "aqlcBp9umUhILRWY-W1KBQAAAA4"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 13:07:54
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.248.39 (39.248.104.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.248.39 (39.248.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 09:07:47.189494 2026] [security2:error] [pid 25184:tid 25184] [client 34.104.248.39:48102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atmaharg.com"] [uri "/.env"] [unique_id "aqlDI0VBz1ipQw8YRDwZNgAAACA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-15 13:05:03
(22 hours ago)
crowdsecurity/CVE-2017-9841
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 10:17:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.104.248.39 (39.248.104.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.248.39 (39.248.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:17:05.594038 2026] [security2:error] [pid 20719:tid 20719] [client 34.104.248.39:56678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "26c.org"] [uri "/.env"] [unique_id "aqkbIbTKHAarAmpkihlCMQAAABk"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-09-15 07:46:55
(1 day ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack