🇨🇭
Origon
2026-06-08 16:53:01
(1 week ago)
http-sensitive-files - IP: 34.14.165.18 - time="2026-06-08T18:53:00+02:00" level=info msg="(555f66b ...
show more
http-sensitive-files - IP: 34.14.165.18 - time="2026-06-08T18:53:00+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.14.165.18 (IN/396982) : 4h ban on Ip 34.14.165.18" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 15:21:56
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.14.165.18 (18.165.14.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.165.18 (18.165.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 11:21:51.372582 2026] [security2:error] [pid 10171:tid 10171] [client 34.14.165.18:49304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.chassell.info.dhsgrad.net"] [uri "/.env.test"] [unique_id "aibeD1YomA0gDsM0DNqQlQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
beon
2026-06-08 14:56:00
(1 week ago)
[DateTime=>2026-06-08T14:56:00Z to 2026-06-08T14:56:04Z (UTC)] , [HoneyPot_Hits=>147 times] , [Honey ...
show more
[DateTime=>2026-06-08T14:56:00Z to 2026-06-08T14:56:04Z (UTC)] , [HoneyPot_Hits=>147 times] , [HoneyPots=>/.env.local, /.env.qa, /development/.env, /.env.demo, /.env.uat, /.env.production and others] , [404targets=>/env.bak, /env, /env.old, /env.txt] , [total_Hits=>151 times] , [hit_per_second=>37.75] , [Keyword=>WordPress]
show less
Bad Web Bot
Web App Attack
Hacking
🇨🇭
4server
2026-06-08 11:28:25
(1 week ago)
[MonJun0813:28:21.0215102026][security2:error][pid3992073:tid3992310][client34.14.165.18:0]ModSecuri ...
show more
[MonJun0813:28:21.0215102026][security2:error][pid3992073:tid3992310][client34.14.165.18:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"proeditum.ch.81-17-25-250.cpanel.site\"][uri\"/v3/.env\"][unique_id\"aianVRlwFaWtFQ6ZmwLVtwAAAAA\"]
show less
Hacking
Web App Attack
🇨🇦
SSH-Admin
2026-06-08 09:00:04
(1 week ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇨🇦
SSH-Admin
2026-06-08 06:40:03
(1 week ago)
Probing for Exploits on ns56
Exploited Host
Web App Attack
🇮🇹
VHosting
2026-06-08 06:10:03
(1 week ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-06-08 04:09:18
(1 week ago)
Too many Status 40X (17)
Scanning/Probing (17)
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-06-08 00:43:27
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 00:18:58
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.14.165.18 (18.165.14.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.165.18 (18.165.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 20:18:53.476364 2026] [security2:error] [pid 32258:tid 32258] [client 34.14.165.18:49142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrsreclamation.com"] [uri "/production/.env"] [unique_id "aiYKbeXUE40gmu6XQdnQOgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack