🇫🇷
ACE-INFORMATIQUE.NC
2026-08-01 19:00:12
(7 hours ago)
Web App Attack blocked by Fail2ban
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 17:28:27
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.39.113.180 (180.113.39.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.113.180 (180.113.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:28:23.690798 2026] [security2:error] [pid 2553505:tid 2553505] [client 34.39.113.180:55822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pankoff.com"] [uri "/.env.prod"] [unique_id "am4st1ZdtNcvqS6hjIOGXQAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-01 17:22:58
(9 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 16:51:59
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.39.113.180 (180.113.39.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.113.180 (180.113.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:51:53.241491 2026] [security2:error] [pid 1356409:tid 1356409] [client 34.39.113.180:56854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hakanbasboga.com.amybeam.com"] [uri "/.env.save"] [unique_id "am4kKYBT3z8RPywlrRZndQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
sid3windr
2026-08-01 16:40:13
(9 hours ago)
GET /.env (Tarpitted for 2m10s, wasted 7.73kB)
Web App Attack
🇺🇸
daveoctober
2026-08-01 16:34:07
(9 hours ago)
October Sentinel: honeypot triggered
Bad Web Bot
Web App Attack
🇩🇪
IVski
2026-08-01 16:27:43
(10 hours ago)
IVski WAF | Multiple 403 Forbidden responses detected from this IP. Likely automated scanning.
DDoS Attack
Bad Web Bot
🇩🇪
big-cloud.nl
2026-08-01 16:14:21
(10 hours ago)
Try to access /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 16:11:12
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.39.113.180 (180.113.39.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.113.180 (180.113.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:11:07.179757 2026] [security2:error] [pid 12454:tid 12454] [client 34.39.113.180:39016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boederinteriordesign.com"] [uri "/.env.local"] [unique_id "am4amxetjiK3eaDZACNWpwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 15:53:09
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.39.113.180 (180.113.39.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.113.180 (180.113.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:53:05.047640 2026] [security2:error] [pid 973094:tid 973094] [client 34.39.113.180:45614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thepinelandclub.com.velvetculture.com"] [uri "/.env.dev"] [unique_id "am4WYbaqhHwJoAL1dTcDUQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-08-01 15:35:02
(10 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 15:24:24
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.39.113.180 (180.113.39.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.113.180 (180.113.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:24:19.546698 2026] [security2:error] [pid 8474:tid 8474] [client 34.39.113.180:38386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.eclipsesoftware.andrew.weigel.name"] [uri "/.env.dev"] [unique_id "am4Po4HceQabrkugX8udlgAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
nekopavel
2026-08-01 15:23:50
(11 hours ago)
34.39.113.180 - - [01/Aug/2026:17:23:49 +0200]"GET /.env.backup HTTP/1.1" 404 19"-" a.neko.chat "cru ...
show more
34.39.113.180 - - [01/Aug/2026:17:23:49 +0200]"GET /.env.backup HTTP/1.1" 404 19"-" a.neko.chat "crusader-worker/1.0""0.004" "0.003""City of London" "GB"
34.39.113.180 - - [01/Aug/2026:17:23:49 +0200]"GET /.env HTTP/1.1" 404 19"-" a.neko.chat "crusader-worker/1.0""0.004" "0.003""City of London" "GB"
34.39.113.180 - - [01/Aug/2026:17:23:49 +0200]"GET /.env.local HTTP/1.1" 404 19"-" a.neko.chat "crusader-worker/1.0""0.004" "0.004""City of London" "GB"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-01 15:01:13
(11 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇳🇱
thedreamer.nl
2026-08-01 14:33:47
(11 hours ago)
34.39.113.180 - - [01/Aug/2026:16:32:57 +0200] "GET /.env.production HTTP/1.1" 502 150 "-" "crusader ...
show more
34.39.113.180 - - [01/Aug/2026:16:32:57 +0200] "GET /.env.production HTTP/1.1" 502 150 "-" "crusader-worker/1.0" "GB" "City of London" "51.51640" "-0.09300"
34.39.113.180 - - [01/Aug/2026:16:32:57 +0200] "GET /.env.dev HTTP/1.1" 502 150 "-" "crusader-worker/1.0" "GB" "City of London" "51.51640" "-0.09300"
34.39.113.180 - - [01/Aug/2026:16:32:57 +0200] "GET /.env.bak HTTP/1.1" 502 150 "-" "crusader-worker/1.0" "GB" "City of London" "51.51640" "-0.09300"
34.39.113.180 - - [01/Aug/2026:16:32:57 +0200] "GET /.env.local HTTP/1.1" 502 150 "-" "crusader-worker/1.0" "GB" "City of London" "51.51640" "-0.09300"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack