🇳🇱
Site.eu
2026-06-15 08:27:20
(17 hours ago)
Excessive 404/403 errors
Brute-Force
🇫🇷
Octopuce
2026-06-15 06:07:23
(20 hours ago)
Aggressive web search of vulnerable pages: /.env.local /api/.env.local /api/.env /api/v1/.env /.env ...
show more
Aggressive web search of vulnerable pages: /.env.local /api/.env.local /api/.env /api/v1/.env /.env ...
show less
Web App Attack
🇳🇱
ConsulHosting
2026-06-14 23:11:57
(1 day ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 21:29:37
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.181.174.16 (16.174.181.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.181.174.16 (16.174.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:29:32.239185 2026] [security2:error] [pid 18666:tid 18666] [client 34.181.174.16:39672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newlindendeli.royal-barbershop.com"] [uri "/.env.production"] [unique_id "ai8dPJVocGYtkmUlqpX5owAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 07:08:43
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.181.174.16 (16.174.181.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.181.174.16 (16.174.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 03:08:37.822387 2026] [security2:error] [pid 19792:tid 19792] [client 34.181.174.16:49120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menzelassociates.com"] [uri "/.env.production"] [unique_id "ai5TdbGeyt0CsfSBtX0wtAAAAF0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-06-14 05:00:05
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 04:54:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.181.174.16 (16.174.181.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.181.174.16 (16.174.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 00:54:55.286207 2026] [security2:error] [pid 715:tid 715] [client 34.181.174.16:57994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cortesinsulation.com.worldchat.global"] [uri "/.env"] [unique_id "ai40H3h4r8u5EUoosT-ODwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 03:30:29
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 34.181.174.16 (16.174.181.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 34.181.174.16 (16.174.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 23:30:25.092376 2026] [security2:error] [pid 13053:tid 13053] [client 34.181.174.16:39344] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.c-b-s-i.armstrongenvironmental.com"] [uri "/.env"] [unique_id "ai4gUYrmtPF5HB7MC75pLwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
thedreamer.nl
2026-06-14 02:34:46
(1 day ago)
34.181.174.16 - - [14/Jun/2026:04:29:10 +0200] "GET /.env.old HTTP/1.1" 502 552 "-" "Mozilla/5.0 (Ma ...
show more
34.181.174.16 - - [14/Jun/2026:04:29:10 +0200] "GET /.env.old HTTP/1.1" 502 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3792.0 Safari/537.36" "US" "Washington" "38.89400" "-77.03650"
34.181.174.16 - - [14/Jun/2026:04:29:10 +0200] "GET /.env.copy HTTP/1.1" 502 150 "-" "Mozilla/4.77 [en] (X11; I; IRIX;64 6.5 IP30)" "US" "Washington" "38.89400" "-77.03650"
34.181.174.16 - - [14/Jun/2026:04:29:10 +0200] "GET /.env.preprod HTTP/1.1" 502 150 "-" "Mozilla/5.0 (compatible; Konqueror/4.5; Windows) KHTML/4.5.4 (like Gecko)" "US" "Washington" "38.89400" "-77.03650"
34.181.174.16 - - [14/Jun/2026:04:29:10 +0200] "GET /.env.pre-production HTTP/1.1" 502 552 "-" "Mozilla/5.0 (Linux; Android 7.0; LGMS428) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "US" "Washington" "38.89400" "-77.03650"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack