2026-09-16 00:52:47
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-15 21:14:11
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.64.84.206 (206.84.64.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.84.206 (206.84.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:14:07.346700 2026] [security2:error] [pid 22072:tid 22072] [client 34.64.84.206:49700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jackkerrart.com"] [uri "/.env"] [unique_id "aqm1H2JHaulHNPbuZhpCVwAAAA4"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 20:04:41
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.64.84.206 (206.84.64.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.84.206 (206.84.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:04:34.839573 2026] [security2:error] [pid 3813:tid 3813] [client 34.64.84.206:36096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "harrisonwilde.com"] [uri "/.env"] [unique_id "aqmk0uueyWbsbFdtqkLXwQAAAAI"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 14:58:29
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.64.84.206 (206.84.64.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.84.206 (206.84.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 10:58:26.135095 2026] [security2:error] [pid 12919:tid 12919] [client 34.64.84.206:48812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dscampbell.com"] [uri "/.env"] [unique_id "aqldEtrcBpziX3f42irK8QAAABE"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-15 13:57:03
(5 days ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.env | 2026-09-15 13:57 UTC
show less
Hacking
Web App Attack
🇧🇪
taivas.nl
2026-09-15 13:32:20
(5 days ago)
Site scraper
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 11:38:15
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.64.84.206 (206.84.64.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.84.206 (206.84.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:38:11.123042 2026] [security2:error] [pid 13578:tid 13578] [client 34.64.84.206:44942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "professionalpartyplanner.org"] [uri "/.env"] [unique_id "aqkuI63JBLB3L29wK4TNBgAAABo"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
WellSpring
2026-09-15 10:47:55
(5 days ago)
env leak on prodigalmirror.org/core/.env — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack