🇳🇱
Savvii
2026-06-15 12:43:36
(3 months ago)
20 attempts against mh-misbehave-ban on ceres
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-15 09:07:15
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇪
voormedia
2026-06-15 08:14:01
(3 months ago)
Accessed trap at '/.env'
Web App Attack
🇩🇪
BlueWire Hosting
2026-06-15 08:08:35
(3 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-15 05:30:56
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.39.233.187 (187.233.39.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.233.187 (187.233.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:30:51.259548 2026] [security2:error] [pid 9428:tid 9428] [client 34.39.233.187:55322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.britanniapilates.com.systemcapacityoptimization.com"] [uri "/app/.env.prod"] [unique_id "ai-OC2UXRqkjp6wQYIU67wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-15 04:06:58
(3 months ago)
Scanning/Probing (40)
Brute-Force
Web App Attack
🇫🇷
Octopuce
2026-06-14 23:36:04
(3 months ago)
Aggressive web search of vulnerable pages: /src/.env /api/v1/.env /symfony/.env /laravel/.env /wordp ...
show more
Aggressive web search of vulnerable pages: /src/.env /api/v1/.env /symfony/.env /laravel/.env /wordpress/.env ...
show less
Web App Attack
🇳🇱
Savvii
2026-06-14 11:43:23
(3 months ago)
20 attempts against mh-misbehave-ban on ec102955
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 07:42:58
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.39.233.187 (187.233.39.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.233.187 (187.233.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 03:42:53.866720 2026] [security2:error] [pid 17132:tid 17132] [client 34.39.233.187:35792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cynosuresnapshots.com.pluralmatrix.net"] [uri "/app/.env"] [unique_id "ai5bfavy63i13TjxL9lAlAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
EGP Abuse Dept
2026-06-14 06:29:58
(3 months ago)
Scanning for web/db/file exploits on www.heidinailslijfbeautysalon.nl
SQL Injection
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-06-14 05:00:23
(3 months ago)
{"level":"info","ts":1781413220.9021745,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1781413220.9021745,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.39.233.187","remote_port":"36386","client_ip":"34.39.233.187","proto":"HTTP/1.1","method":"GET","host":"status.dtesvancouver.com","uri":"/.env.qa","headers":{"User-Agent":["Mozilla/5.0 (Linux; U; Android 1.5; en-us; htc_bahamas Build/CRB17) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.dtesvancouver.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000853812,"size":0,"status":429,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"],"Server":["Caddy"]}}
{"level":"info","ts":1781413220.945589,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.39.233.187","remote_port":"36460","client_ip":"34.39.233.187","prot
...
show less
DDoS Attack
Web App Attack
🇮🇹
VHosting
2026-06-14 03:15:04
(4 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇩🇪
DaleCooper
2026-06-14 02:31:08
(4 months ago)
34.39.233.187 - - [14/Jun/2026:04:30:00 +0200] "GET /mail/sendgrid.env HTTP/1.1" 404 139 "-" "MOT-V1 ...
show more
34.39.233.187 - - [14/Jun/2026:04:30:00 +0200] "GET /mail/sendgrid.env HTTP/1.1" 404 139 "-" "MOT-V177/0.1.75 UP.Browser/6.2.3.9.c.12 (GUI) MMP/2.0 UP.Link/6.3.1.13.0"
34.39.233.187 - - [14/Jun/2026:04:30:02 +0200] "GET /mailer/sendgrid.env HTTP/1.1" 404 139 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1"
...
show less
Brute-Force
🇳🇱
Cloud86 B.V.
2026-06-13 22:26:02
(4 months ago)
categories: DDoS Attack
DDoS Attack
🇫🇮
Kimmo Rieskaniemi
2026-06-13 22:07:58
(4 months ago)
CrowdSec triggered crowdsecurity/http-sensitive-files
Web App Attack
Hacking