🇬🇧
thetomtaylor.co.uk
2026-08-16 02:07:01
UTC ·
(2 months ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,wa01,wa02]
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-08-16 01:08:01
UTC ·
(2 months ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice02,mx02]
Bad Web Bot
Web App Attack
🇮🇳
evicky2002
2026-08-15 07:06:21
UTC ·
(2 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇧🇪
Ivo Vynckier
2026-08-12 10:42:00
UTC ·
(3 months ago)
34.153.19.67 - - [12/Aug/2026:03:32:01 +0200] "GET /core/.env HTTP/1.1" 403 117 "-" "python-requests/2.34.2"
Web App Attack
🇮🇩
David Koswari
2026-08-12 05:27:00
UTC ·
(3 months ago)
REQ_BLOCKED_SECURITY
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇷🇺
Mga Admin
2026-08-12 04:08:48
UTC ·
(3 months ago)
34.153.19.67 - - [12/Aug/2026:11:08:47 +0700] "GET /core/.env HTTP/1.1" 404 69 "-" "python-requests/2.34.2"
...
Web App Attack
2026-08-12 03:39:20
UTC ·
(3 months ago)
34.153.19.67 - - [12/Aug/2026:11:39:19 +0800] "GET /core/.env HTTP/1.1" 301 244 "-" "python-requests/2.34.2"
...
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-08-12 03:25:09
UTC ·
(3 months ago)
Accessed trap at '/.env'
Web App Attack
🇺🇸
TPI-Abuse
2026-08-12 03:18:53
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.153.19.67 (67.19.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 23:18:48.979450 2026] [security2:error] [pid 3708299:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.19.67 (67.19.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 23:18:48.979450 2026] [security2:error] [pid 3708299:tid 3708299] [client 34.153.19.67:50894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrbaystreet.com"] [uri "/core/.env"] [unique_id "anvmGIi4OG8rFSm63Twm9AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-12 02:43:56
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.153.19.67 (67.19.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 22:43:52.430387 2026] [security2:error] [pid 863286:tid 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.19.67 (67.19.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 22:43:52.430387 2026] [security2:error] [pid 863286:tid 863286] [client 34.153.19.67:62582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lukeschicago.com"] [uri "/.env"] [unique_id "anvd6JURqNq9xjp7Dd9mUAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇰
HostingGroup
2026-08-12 02:31:53
UTC ·
(3 months ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 3. First blocked: 2026-08-12.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-12 02:12:52
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.153.19.67 (67.19.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 22:12:44.908028 2026] [security2:error] [pid 3238043:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.19.67 (67.19.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 22:12:44.908028 2026] [security2:error] [pid 3238043:tid 3238043] [client 34.153.19.67:52384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kentweakley.com"] [uri "/core/.env"] [unique_id "anvWnAEUWL_SZd85uPiQnQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-08-12 01:59:18
UTC ·
(3 months ago)
Credential and secrets file probing | req: /.env | UA: python-requests/2.34.2
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-12 01:51:31
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.153.19.67 (67.19.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 21:51:24.606345 2026] [security2:error] [pid 234210:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.19.67 (67.19.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 21:51:24.606345 2026] [security2:error] [pid 234210:tid 234210] [client 34.153.19.67:64564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ismaelcavazos.com"] [uri "/core/.env"] [unique_id "anvRnNxfdgjjIcDlO4pGCwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-12 01:33:15
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.153.19.67 (67.19.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 21:33:11.037932 2026] [security2:error] [pid 426708:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.19.67 (67.19.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 21:33:11.037932 2026] [security2:error] [pid 426708:tid 426708] [client 34.153.19.67:50938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "huboon.com"] [uri "/Api/.env"] [unique_id "anvNV1kdMLKAeR7mpyX5rAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack