๐ท๐บ
DZBOT
2026-06-15 08:38:28
(8 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ฌ๐ง
consul.to
2026-06-15 05:59:05
(11 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 04:48:20
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.172.69 (69.172.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.172.69 (69.172.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:48:16.837878 2026] [security2:error] [pid 23906:tid 23906] [client 34.88.172.69:43350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.natasways.com"] [uri "/apps/frontend/.env"] [unique_id "ai-EEJ_C8860f4arBLl-gQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Void Vendor
2026-06-15 04:18:00
(12 hours ago)
VoidTrap [15,21]: [offense #1 โ 30 minutes] Honeypot: /api/v2/.env | ip: 34.88.172.69 | loc: Lappeen ...
show more
VoidTrap [15,21]: [offense #1 โ 30 minutes] Honeypot: /api/v2/.env | ip: 34.88.172.69 | loc: Lappeenranta, South Karelia, FI, AS396982 Google LLC | path: /api/v2/.env | ua: Mozilla/5.0 (Linux; U; Android 1.6; en-us; SonyEricssonX10i
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 04:17:56
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.172.69 (69.172.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.172.69 (69.172.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:17:49.831432 2026] [security2:error] [pid 29786:tid 29786] [client 34.88.172.69:43130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goodacoustic.com"] [uri "/.env.local"] [unique_id "ai987YEQ_GDIpuGE1hZU6wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Cloud86 B.V.
2026-06-15 03:13:07
(13 hours ago)
categories: DDoS Attack
DDoS Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 02:39:55
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.172.69 (69.172.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.172.69 (69.172.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:39:48.872376 2026] [security2:error] [pid 10497:tid 10521] [client 34.88.172.69:50936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.360degreevalue.com.property-management-companies-chicago.com"] [uri "/.env.txt"] [unique_id "ai9l9NMGYCRLuXoEYccCpQAAAFU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐น
penguin-solutions.at
2026-06-15 00:48:15
(16 hours ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
๐ฉ๐ช
4server
2026-06-14 21:32:57
(19 hours ago)
[SunJun1423:32:54.3947702026][security2:error][pid2397640:tid2397711][client34.88.172.69:0]ModSecuri ...
show more
[SunJun1423:32:54.3947702026][security2:error][pid2397640:tid2397711][client34.88.172.69:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"maxay.ch.136-243-54-122.cpanel.site\"][uri\"/.env.old\"][unique_id\"ai8eBhdi3Jy3jZW4V59L0QAAAIo\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-06-14 18:58:38
(22 hours ago)
Multiple WAF Violations
Web App Attack
๐ฎ๐ช
AutosOnShow
2026-06-14 15:54:06
(1 day ago)
blocked for webapp attack | path requested: /.env | seen at 2026-06-14 15:53:14.380 |
Web App Attack
๐ง๐พ
lns.bz
2026-06-14 14:28:54
(1 day ago)
Too many 404 requests [BY]
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 07:19:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.88.172.69 (69.172.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.172.69 (69.172.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 03:19:15.912874 2026] [security2:error] [pid 24569:tid 24569] [client 34.88.172.69:34564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.merrickarts.azbrooks.com"] [uri "/internal/.env.production"] [unique_id "ai5V8y8Mrlm2wjWu7XC6tQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 05:46:34
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.88.172.69 (69.172.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.172.69 (69.172.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 01:46:26.264911 2026] [security2:error] [pid 12464:tid 12464] [client 34.88.172.69:42286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.karendraughon.com"] [uri "/.env.orig"] [unique_id "ai5AMpCnxU2OiLYg3DbkxAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-14 05:31:53
(1 day ago)
Multiple web server 400 error codes from same source ip
Web App Attack