🇳🇱
homeshowdomain.nl
2026-09-07 21:59:49
(4 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-06.
show less
Web App Attack
SSH
Hacking
🇧🇷
vfAcceloReporter
2026-09-07 09:51:02
(16 hours ago)
34.170.158.46 - - [07/Sep/2026:06:51:02 -0300] "GET /@fs/.env.local?raw?? HTTP/1.1" 200 1442 "-" "Mo ...
show more
34.170.158.46 - - [07/Sep/2026:06:51:02 -0300] "GET /@fs/.env.local?raw?? HTTP/1.1" 200 1442 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
show less
Brute-Force
Web App Attack
Exploited Host
🇧🇪
cmbplf
2026-09-07 09:42:56
(17 hours ago)
235 requests with url.path *.azure/*
Brute-Force
Bad Web Bot
🇳🇱
Savvii
2026-09-07 09:41:15
(17 hours ago)
20 attempts against mh-misbehave-ban on lunar
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 09:19:58
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 05:19:50.431192 2026] [security2:error] [pid 27737:tid 27737] [client 34.170.158.46:28486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.yoshiyukiya.com"] [uri "/@fs/.env.development"] [unique_id "ap6BttPmgGkJKxuvkyQlzAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 08:41:33
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 04:41:27.792564 2026] [security2:error] [pid 18610:tid 18610] [client 34.170.158.46:3132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vrevgaming.net"] [uri "/@fs/../../.env"] [unique_id "ap54t2YGseZfjTaDRoDJ7AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 08:00:10
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 04:00:06.035948 2026] [security2:error] [pid 4040:tid 4040] [client 34.170.158.46:13082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.grollman.com"] [uri "/@fs/.env"] [unique_id "ap5vBlh-PsMrfuQWxtOvjgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 07:26:52
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 03:26:48.512899 2026] [security2:error] [pid 1417472:tid 1417472] [client 34.170.158.46:57470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "al-hafeeztrust.al-bukhari.org"] [uri "/@fs/../../.env"] [unique_id "ap5nOC_fit_gbuMfPz5R5gAAAIM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 06:10:27
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 02:10:22.310978 2026] [security2:error] [pid 20741:tid 20741] [client 34.170.158.46:51232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.cruisedawgs.com"] [uri "/@fs/.env.local"] [unique_id "ap5VTurtLLzyA5nctKBVkAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 05:39:13
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 01:39:05.445979 2026] [security2:error] [pid 11775:tid 11791] [client 34.170.158.46:48378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.christina.abney.info"] [uri "/@fs/root/.env"] [unique_id "ap5N-TpEgGsx2fd7tLgvoQAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
sdos.es
2026-09-07 05:19:23
(21 hours ago)
"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env.local ...
show more
"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env.local"
show less
Web App Attack
🇺🇸
mnsf
2026-09-07 05:05:11
(21 hours ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 05:01:17
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.170.158.46 (46.158.170.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 01:01:13.464429 2026] [security2:error] [pid 2539:tid 2539] [client 34.170.158.46:61572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kochcreative.com"] [uri "/@fs/.env.development"] [unique_id "ap5FGdXP0O1PX3wCzoNLhgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-09-07 04:59:34
(21 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇨🇭
zynex
2026-09-07 04:50:30
(21 hours ago)
URL Probing: /@fs/root/.env
Web App Attack