🇳🇱
Savvii
2026-06-13 16:22:31
(1 week ago)
81 attempts against mh-misbehave-ban on tin
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-13 15:48:01
(1 week ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇺🇸
Victor López
2026-06-13 12:24:12
(1 week ago)
valquintero.com.co 34.118.170.120 - - [13/Jun/2026:07:24:11 -0500] "GET /.env HTTP/1.1" 499 0 "-" "M ...
show more
valquintero.com.co 34.118.170.120 - - [13/Jun/2026:07:24:11 -0500] "GET /.env HTTP/1.1" 499 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.50 Safari/537.36"
valquintero.com.co 34.118.170.120 - - [13/Jun/2026:07:24:11 -0500] "GET /.env.local HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Linux; Android 7.1.2; OC105) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36"
valquintero.com.co 34.118.170.120 - - [13/Jun/2026:07:24:11 -0500] "GET /.env.backup HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Linux; Android 6.0.1; ONE E1003) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.136 Mobile Safari/537.36"
...
show less
Hacking
Web App Attack
🇫🇷
dynamix
2026-06-13 11:23:54
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 10:58:34
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.118.170.120 (120.170.118.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.170.120 (120.170.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 06:58:27.765266 2026] [security2:error] [pid 920:tid 920] [client 34.118.170.120:52452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "julianunplugged.com.juliansongs.com"] [uri "/.env"] [unique_id "ai0306ftmlmrQzubiP2keAAAADc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-13 10:50:27
(1 week ago)
[server.tmg.gr] httpd-suspicious-path: sites=cardiorenal2025.gr; logs=/var/log/httpd/domains/cardior ...
show more
[server.tmg.gr] httpd-suspicious-path: sites=cardiorenal2025.gr; logs=/var/log/httpd/domains/cardiorenal2025.gr.log; samples=/api/.env.local | /app/api/.env | /backend/.env
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 08:08:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.118.170.120 (120.170.118.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.170.120 (120.170.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 04:08:13.287025 2026] [security2:error] [pid 1343:tid 1343] [client 34.118.170.120:52772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.puckerbikinis.puckerbikini.com"] [uri "/.env.backup"] [unique_id "ai0P7ZZ5w6eir30X6Mp65wAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 06:37:51
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.118.170.120 (120.170.118.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.170.120 (120.170.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:37:43.348421 2026] [security2:error] [pid 24504:tid 24504] [client 34.118.170.120:59378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.peterpullman.budpowellbio.com"] [uri "/.env.backup.txt"] [unique_id "aiz6t_juo4n_ZPin9kKXdwAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-13 06:28:31
(1 week ago)
(modsecurity) srv104 ModSecurity 34.118.170.120 (CA/Canada/120.170.118.34.bc.googleusercontent.com): ...
show more
(modsecurity) srv104 ModSecurity 34.118.170.120 (CA/Canada/120.170.118.34.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
2026-06-13 05:07:34
(1 week ago)
Multiple web server 400 error codes from same source ip
Web App Attack
2026-06-13 04:55:31
(1 week ago)
Aggressive web scan
Web App Attack
🇬🇧
consul.to
2026-06-13 04:49:58
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
maxxsense
2026-06-13 03:19:23
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.118.170.120 (CA/Canada/120.170.118.3 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.118.170.120 (CA/Canada/120.170.118.34.bc.googleusercontent.com)
show less
SQL Injection