🇳🇱
homeshowdomain.nl
2026-06-16 22:03:49
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-15.
show less
Web App Attack
SSH
Hacking
🇫🇷
Octopuce
2026-06-15 10:14:49
(4 days ago)
Aggressive web search of vulnerable pages: /.env /.env.local /api/.env.local /api/.env /api/v1/.env ...
show more
Aggressive web search of vulnerable pages: /.env /.env.local /api/.env.local /api/.env /api/v1/.env ...
show less
Web App Attack
🇫🇮
YF
2026-06-15 10:00:59
(4 days ago)
Environment file probe
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 08:25:06
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.156.184.54 (54.184.156.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.156.184.54 (54.184.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 04:24:57.780013 2026] [security2:error] [pid 28615:tid 28615] [client 34.156.184.54:60030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mamaimhome.andrsn.com"] [uri "/.env.production.local"] [unique_id "ai-22eeuOgWyjp6hB0PK8gAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-15 04:59:07
(4 days ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇫🇷
✨
2026-06-15 00:49:08
(4 days ago)
Domain : hakuna-matata-rescue.org.uk
Rule : hack
2026-06-15 00:46:57 ***hidden-privacy*** GET /.env. ...
show more
Domain : hakuna-matata-rescue.org.uk
Rule : hack
2026-06-15 00:46:57 ***hidden-privacy*** GET /.env.local.bak - 443 - 34.156.184.54 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15 - hakuna-matata-rescue.org.uk 404 0 0 34001 261 3303 - -
show less
Hacking
SQL Injection
Brute-Force
🇺🇸
TPI-Abuse
2026-06-15 00:15:37
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.156.184.54 (54.184.156.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.156.184.54 (54.184.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:15:33.058399 2026] [security2:error] [pid 23964:tid 23964] [client 34.156.184.54:38248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thelotsmokehouse.com"] [uri "/.env.backup.txt"] [unique_id "ai9EJcAAv-NnWPiG_ObYmwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-15 00:09:16
(4 days ago)
Abuse Detected (116)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 23:57:03
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.156.184.54 (54.184.156.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.156.184.54 (54.184.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:56:57.930329 2026] [security2:error] [pid 15503:tid 15503] [client 34.156.184.54:44264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "odessatexas.us.swhinc.net"] [uri "/.env.qa"] [unique_id "ai8_yf2YZjohBiuq0GSYiAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 22:08:49
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.156.184.54 (54.184.156.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.156.184.54 (54.184.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:08:45.739434 2026] [security2:error] [pid 23056:tid 23056] [client 34.156.184.54:33582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ronniescedarinn.com"] [uri "/.env.local"] [unique_id "ai8mbatBNsZlE9b-zGhi0QAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-14 13:40:09
(5 days ago)
Aggressive web scan
Web App Attack
🇳🇱
Savvii
2026-06-14 11:58:21
(5 days ago)
20 attempts against mh_ha-misbehave-ban on crop
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-14 07:06:14
(5 days ago)
Scanning/Probing (121)
Request Overload (126)
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-06-14 04:00:05
(5 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack