🇺🇸
TPI-Abuse
2026-06-15 07:52:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.142.44.220 (220.44.142.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.44.220 (220.44.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:52:47.662395 2026] [security2:error] [pid 2598:tid 2609] [client 34.142.44.220:48106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catslife.net"] [uri "/app/api/.env"] [unique_id "ai-vTyyyuxIrnUhX8e9boAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-15 06:08:36
(1 day ago)
34.142.44.220 - - [15/Jun/2026:08:08:24 +0200] "GET /.env.local.bak HTTP/1.1" 404 448 "-" "Mozilla/5 ...
show more
34.142.44.220 - - [15/Jun/2026:08:08:24 +0200] "GET /.env.local.bak HTTP/1.1" 404 448 "-" "Mozilla/5.0 (Linux; Android 9; RMX1851) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
34.142.44.220 - - [15/Jun/2026:08:08:24 +0200] "GET /.env.local.bak HTTP/1.1" 404 287 "-" "Mozilla/5.0 (Linux; Android 9; RMX1851) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
34.142.44.220 - - [15/Jun/2026:08:08:24 +0200] "GET /.env.production.local HTTP/1.1" 404 448 "-" "Mozilla/5.0 (Linux; U; Android 2.1-update1; de-de; HTC Desire 1.19.161.5 Build/ERE27) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.17"
34.142.44.220 - - [15/Jun/2026:08:08:24 +0200] "GET /.env.production.local HTTP/1.1" 404 287 "-" "Mozilla/5.0 (Linux; U; Android 2.1-update1; de-de; HTC Desire 1.19.161.5 Build/ERE27) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.17"
34.142.44.220 - - [15/Jun/2026:08:08:24 +0200] "GET /env.txt
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Cloud86 B.V.
2026-06-15 04:52:01
(1 day ago)
categories: DDoS Attack
DDoS Attack
🇺🇸
TPI-Abuse
2026-06-15 02:59:03
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.142.44.220 (220.44.142.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.44.220 (220.44.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:58:58.174640 2026] [security2:error] [pid 3669:tid 3669] [client 34.142.44.220:56972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bradjohnsonqh.com"] [uri "/.env.backup"] [unique_id "ai9qcilmQv-budo2SmlB3wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 02:24:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.142.44.220 (220.44.142.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.44.220 (220.44.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:24:04.561785 2026] [security2:error] [pid 25717:tid 25717] [client 34.142.44.220:40942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "noviasaltovacio.com.mx"] [uri "/.env.local"] [unique_id "ai9iRFhudQgCQRNTx6dKSwAAAE4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇹
penguin-solutions.at
2026-06-15 02:01:01
(1 day ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
🇸🇪
vaia.cloud
2026-06-15 01:06:01
(1 day ago)
trying wp-login.php/xmlrpc.php 152 times in 1 minutes
Brute-Force
Web App Attack
2026-06-15 00:30:14
(1 day ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇫🇮
YF
2026-06-15 00:00:18
(1 day ago)
Attaque distribuée subnet
DDoS Attack
Web App Attack
🇫🇷
dynamix
2026-06-14 23:10:59
(1 day ago)
Multiple WAF Violations
Web App Attack
🇳🇱
ConsulHosting
2026-06-14 13:12:24
(1 day ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇬🇧
consul.to
2026-06-14 07:04:27
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇹
VHosting
2026-06-14 06:00:04
(2 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-06-14 04:10:48
(2 days ago)
Scanning/Probing (18)
Brute-Force
Web App Attack