2026-06-15 06:06:31
(2 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇩🇪
big-cloud.nl
2026-06-15 04:15:44
(4 hours ago)
Try to access /.env
Web App Attack
🇳🇱
Cloud86 B.V.
2026-06-15 04:00:06
(5 hours ago)
categories: DDoS Attack
DDoS Attack
🇺🇸
mnsf
2026-06-15 02:06:26
(6 hours ago)
Too many Status 40X (17)
Scanning/Probing (27)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 01:10:43
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.174.217.48 (48.217.174.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.217.48 (48.217.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:10:39.999554 2026] [security2:error] [pid 9084:tid 9084] [client 34.174.217.48:40248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pikespeakjazz.com.infinityartistsgroup.com"] [uri "/.env.prod"] [unique_id "ai9RD8S4e0V-G3Eb_pPPMAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 00:43:16
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.174.217.48 (48.217.174.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.217.48 (48.217.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:43:09.483386 2026] [security2:error] [pid 12474:tid 12474] [client 34.174.217.48:49516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sixtiesdiner.jbaydeliveries.com"] [uri "/.env.live"] [unique_id "ai9KnYvoVEJnpt3DOlyLpgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-06-15 00:38:18
(8 hours ago)
Aggressive web search of vulnerable pages: /api/.env.local /.env /api/v1/.env /api/v2/.env /api/v3/. ...
show more
Aggressive web search of vulnerable pages: /api/.env.local /.env /api/v1/.env /api/v2/.env /api/v3/.env ...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 00:23:33
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.174.217.48 (48.217.174.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.217.48 (48.217.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:23:26.218195 2026] [security2:error] [pid 25221:tid 25221] [client 34.174.217.48:38854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "phalanxemail.axiomemail.net"] [uri "/.env.dev"] [unique_id "ai9F_mhs4bq_IL0F8uM2IwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
grassau.com
2026-06-15 00:19:01
(8 hours ago)
*Port Scan* detected from 34.174.217.48 (US/United States/Texas/Dallas/48.217.174.34.bc.googleuserco ...
show more
*Port Scan* detected from 34.174.217.48 (US/United States/Texas/Dallas/48.217.174.34.bc.googleusercontent.com).
show less
Port Scan
🇦🇺
paulshipley.com.au
2026-06-14 22:57:49
(10 hours ago)
[Mon Jun 15 08:57:49.029913 2026] [security2:error] [pid 27620] [client 34.174.217.48:36498] [client ...
show more
[Mon Jun 15 08:57:49.029913 2026] [security2:error] [pid 27620] [client 34.174.217.48:36498] [client 34.174.217.48] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.stkildashule.org.au"] [uri "/.env.dev"] [unique_id "ai8x7eYvPfvIhFwvi8CH-gAAAAI"]
...
show less
Web App Attack
🇨🇭
backslash
2026-06-14 22:03:01
(10 hours ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
🇧🇾
lns.bz
2026-06-14 14:27:12
(18 hours ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 06:27:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.174.217.48 (48.217.174.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.217.48 (48.217.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 02:27:08.270221 2026] [security2:error] [pid 16247:tid 16247] [client 34.174.217.48:53052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scandicakes.com.i-spose.com"] [uri "/.env.staging"] [unique_id "ai5JvMNmXAts7RMWwR_KlwAAAG0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-14 05:35:09
(1 day ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇮🇹
VHosting
2026-06-14 04:35:04
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack