2026-06-15 08:28:04
(1 day ago)
Bot / scanning and/or hacking attempts: GET /htdocs/.env HTTP/1.1, GET /backend/.env HTTP/1.1, GET / ...
show more
Bot / scanning and/or hacking attempts: GET /htdocs/.env HTTP/1.1, GET /backend/.env HTTP/1.1, GET /apps/backend/.env HTTP/1.1, GET /backend/sendgrid.env HTTP/1.1, GET /admin/.env.production HTTP/1.1
show less
Hacking
Web App Attack
2026-06-15 07:57:11
(1 day ago)
Bot / seems abusive / Apache connections: 44
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2026-06-15 07:15:48
(1 day ago)
Malicious activity from IP detected: crowdsecurity/http-sensitive-files.
Web App Attack
Hacking
🇩🇪
ITSNF
2026-06-15 06:15:21
(1 day ago)
Blocked by os-abuseipdb; 1682 hits, proto=tcp, ports=443,80
Port Scan
Hacking
🇳🇱
e.fierstra
2026-06-15 05:55:56
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 05:27:51
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.50.186.24 (24.186.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.186.24 (24.186.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:27:47.416038 2026] [security2:error] [pid 28769:tid 28769] [client 34.50.186.24:38136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.avvmarchetticollini.it"] [uri "/api/.env.bak"] [unique_id "ai-NU8pdzaAB1D3Wjt1b0wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 03:50:41
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.50.186.24 (24.186.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.186.24 (24.186.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:50:34.495342 2026] [security2:error] [pid 6276:tid 6276] [client 34.50.186.24:33944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.playerpianorestorations.player-care.com"] [uri "/.env.preprod"] [unique_id "ai92iocG4MY1R5-2Ov5dtAAAAGk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-15 01:06:49
(1 day ago)
Abuse Detected (40)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 00:53:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.50.186.24 (24.186.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.186.24 (24.186.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:53:17.004704 2026] [security2:error] [pid 31019:tid 31039] [client 34.50.186.24:41364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rodela.com"] [uri "/.env.local"] [unique_id "ai9M_bHkKShrBaxWMMY9JwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-06-15 00:18:43
(1 day ago)
20 attempts against mh-misbehave-ban on orcus
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Cloud86 B.V.
2026-06-14 23:26:02
(1 day ago)
categories: DDoS Attack
DDoS Attack
🇫🇷
ELYAZ
2026-06-14 22:34:45
(1 day ago)
(y3) Failed access -byebye- from 34.50.186.24 (US/United States/24.186.50.34.bc.googleusercontent.co ...
show more
(y3) Failed access -byebye- from 34.50.186.24 (US/United States/24.186.50.34.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
2026-06-14 21:26:08
(1 day ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-14 21:20:04
(1 day ago)
(modsecurity) srv102 ModSecurity 34.50.186.24 (US/United States/24.186.50.34.bc.googleusercontent.co ...
show more
(modsecurity) srv102 ModSecurity 34.50.186.24 (US/United States/24.186.50.34.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
VanKoh
2026-06-14 19:06:45
(1 day ago)
34.50.186.24 - - [14/Jun/2026:13:06:43 -0600] "GET /.env.demo HTTP/1.1" 404 43856 "-" "Mozilla/5.0 ( ...
show more
34.50.186.24 - - [14/Jun/2026:13:06:43 -0600] "GET /.env.demo HTTP/1.1" 404 43856 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1 Safari/605.1.15"
34.50.186.24 - - [14/Jun/2026:13:06:43 -0600] "GET /.env.testing HTTP/1.1" 404 43856 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.86 Safari/537.36"
34.50.186.24 - - [14/Jun/2026:13:06:43 -0600] "GET /.env.development.local HTTP/1.1" 404 43856 "-" "Mozilla/5.0 (Linux; Android 9; ONEPLUS A6010) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36"
...
show less
Port Scan
Web App Attack