🇺🇸
TPI-Abuse
2026-06-15 07:16:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.96.137.251 (251.137.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.137.251 (251.137.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:16:24.354174 2026] [security2:error] [pid 4501:tid 4501] [client 34.96.137.251:35290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vtmooses.us"] [uri "/prod/.env"] [unique_id "ai-myIO6rCST4hpTOl_w9gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-15 07:04:33
(1 week ago)
Multiple WAF Violations
Web App Attack
🇩🇪
4server
2026-06-15 06:24:20
(1 week ago)
[MonJun1508:24:16.6013792026][security2:error][pid3892628:tid3892632][client34.96.137.251:0]ModSecur ...
show more
[MonJun1508:24:16.6013792026][security2:error][pid3892628:tid3892632][client34.96.137.251:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"sito-online.ch.136-243-54-122.cpanel.site\"][uri\"/.env.production.bak\"][unique_id\"ai-akJtzAPZDdmef6U_-ogAAAAE\"]
show less
Port Scan
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-06-15 05:54:00
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Cloud86 B.V.
2026-06-15 01:39:07
(1 week ago)
categories: DDoS Attack
DDoS Attack
🇺🇸
TPI-Abuse
2026-06-15 00:06:53
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.96.137.251 (251.137.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.137.251 (251.137.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:06:50.529320 2026] [security2:error] [pid 22446:tid 22446] [client 34.96.137.251:36166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.knuf.fritsknuf.com"] [uri "/.env.txt"] [unique_id "ai9CGtOA8CgeSW9yEo_DwAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
paissangroup
2026-06-14 22:17:39
(1 week ago)
Multiple WAF Violations
Web App Attack
🇩🇪
ghostwarriors
2026-06-14 21:50:10
(1 week ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 20:57:04
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.96.137.251 (251.137.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.96.137.251 (251.137.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 16:56:59.765902 2026] [security2:error] [pid 13245:tid 13245] [client 34.96.137.251:49502] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.genesis7.co.agenesis7.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.genesis7.co.agenesis7.com"] [uri "/env.backup"] [unique_id "ai8Vm5-83sd3zHLkNWcOLgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-06-14 18:25:11
(1 week ago)
20 attempts against mh-misbehave-ban on chard
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-06-14 14:52:41
(1 week ago)
20 attempts against mh_ha-misbehave-ban on storm
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Da_tschek
2026-06-14 11:45:46
(1 week ago)
Port scanning
Port Scan
Hacking
2026-06-14 05:23:38
(1 week ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 05:06:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.96.137.251 (251.137.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.137.251 (251.137.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 01:05:57.985849 2026] [security2:error] [pid 11771:tid 11771] [client 34.96.137.251:36428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ask2024.com.whatifandwhynot.xyz"] [uri "/.env.bak"] [unique_id "ai42tcubIvFMCKFOZ5Z-sgAAAGI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-06-14 04:47:59
(1 week ago)
Aggressive web search of vulnerable pages: /api/v3/.env /.env.local /api/.env /api/v1/.env /api/v2/. ...
show more
Aggressive web search of vulnerable pages: /api/v3/.env /.env.local /api/.env /api/v1/.env /api/v2/.env ...
show less
Web App Attack