🇺🇸
kosada.com
2026-06-15 12:03:25
(1 day ago)
Web vulnerability probing: /deploy/credentials.json
Web App Attack
🇩🇪
MBombeck
2026-06-15 08:12:04
(2 days ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 07:48:15
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.158.207.11 (11.207.158.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.158.207.11 (11.207.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:48:09.669987 2026] [security2:error] [pid 14586:tid 14586] [client 34.158.207.11:44178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cienmalos.com"] [uri "/.env.txt"] [unique_id "ai-uOZMwQ2kgyEB3iXlHfAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-06-15 05:19:24
(2 days ago)
Aggressive web search of vulnerable pages: /admin/.env /api/v3/.env /api/v1/.env /development/.env / ...
show more
Aggressive web search of vulnerable pages: /admin/.env /api/v3/.env /api/v1/.env /development/.env /backend/.env ...
show less
Web App Attack
🇳🇱
Site.eu
2026-06-15 04:31:11
(2 days ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-06-15 02:26:06
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.158.207.11 (11.207.158.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.158.207.11 (11.207.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:26:02.440753 2026] [security2:error] [pid 5213:tid 5213] [client 34.158.207.11:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.distro.media"] [uri "/.env.uat"] [unique_id "ai9iuoGR0knvpOzDC3iVfwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-15 01:04:47
(2 days ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇳🇱
Cloud86 B.V.
2026-06-14 23:52:06
(2 days ago)
categories: DDoS Attack
DDoS Attack
🇺🇸
TPI-Abuse
2026-06-14 22:29:52
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.158.207.11 (11.207.158.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.158.207.11 (11.207.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:29:46.825040 2026] [security2:error] [pid 7787:tid 7787] [client 34.158.207.11:46494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garantaconsulting.com"] [uri "/.env.live"] [unique_id "ai8rWiAxcPkpw6JDGMn9XAAAAGE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 21:27:18
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.158.207.11 (11.207.158.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.158.207.11 (11.207.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:27:12.576636 2026] [security2:error] [pid 10341:tid 10341] [client 34.158.207.11:37994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intelerium.com"] [uri "/.env.backup"] [unique_id "ai8csCFMNAyxnwMoJYEeygAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
sernate
2026-06-14 21:03:37
(2 days ago)
(403blocker) 403 trigger 34.158.207.11 (KR/South Korea/11.207.158.34.bc.googleusercontent.com): 80 i ...
show more
(403blocker) 403 trigger 34.158.207.11 (KR/South Korea/11.207.158.34.bc.googleusercontent.com): 80 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER
show less
Brute-Force
🇳🇱
Savvii
2026-06-14 14:40:13
(2 days ago)
71 attempts against mh-misbehave-ban on taro
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-06-14 04:15:04
(3 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack