🇧🇪
cmbplf
2026-06-11 19:31:32
(18 hours ago)
574 requests with url.path *.env
Brute-Force
Bad Web Bot
🇩🇪
DEV-DNS
2026-06-11 15:01:51
(22 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇬🇧
consul.to
2026-06-11 03:52:59
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
Vegascosmetics
2026-06-11 01:37:27
(1 day ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after attack pattern. Vegas Security
Hacking
Brute-Force
🇩🇪
todix
2026-06-11 01:35:54
(1 day ago)
Web App Attack Exploid from 34.146.69.40
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-10 22:00:50
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
Web App Attack
SSH
Hacking
🇷🇺
DZBOT
2026-06-10 20:01:00
(1 day ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
big-cloud.nl
2026-06-10 17:09:28
(1 day ago)
Try to access /api/v2/.env
Web App Attack
🇳🇱
Site.eu
2026-06-10 17:00:53
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-06-10 09:14:14
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.69.40 (40.69.146.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.69.40 (40.69.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 05:14:07.169220 2026] [security2:error] [pid 13573:tid 13573] [client 34.146.69.40:38666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gwenwaltersartrep.com"] [uri "/private/.env"] [unique_id "aikq34aRg-ubUsFuRlakEAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 05:01:26
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.69.40 (40.69.146.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.69.40 (40.69.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 01:01:17.694110 2026] [security2:error] [pid 6741:tid 6751] [client 34.146.69.40:47350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "councilofforeignministers.com"] [uri "/.env.staging"] [unique_id "aijvndz-I3pGz_XmcucQAQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 03:46:26
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.69.40 (40.69.146.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.69.40 (40.69.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 23:46:21.019094 2026] [security2:error] [pid 15247:tid 15247] [client 34.146.69.40:40574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.amazingfittings.amazinghydraulics.com"] [uri "/.env.bak"] [unique_id "aijeDaKS3XNz_aVCHVWlCwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 02:34:27
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.69.40 (40.69.146.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.69.40 (40.69.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 22:34:22.123942 2026] [security2:error] [pid 6743:tid 6743] [client 34.146.69.40:60838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hackartist.gregorii.com"] [uri "/.env.sample"] [unique_id "aijNLpAPtl9YZ0diGCDDkgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-10 02:28:49
(2 days ago)
34.146.69.40 - - [10/Jun/2026:04:28:48 +0200] "GET /. HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; ...
show more
34.146.69.40 - - [10/Jun/2026:04:28:48 +0200] "GET /. HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1 Safari/605.1.15"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 00:52:09
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.69.40 (40.69.146.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.69.40 (40.69.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 20:52:03.669640 2026] [security2:error] [pid 5592:tid 5592] [client 34.146.69.40:38114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fruitinthedesert.com"] [uri "/.env.qa"] [unique_id "aii1M6x-8KGaafmgldX5OQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack