๐ฌ๐ง
andypiper
2026-09-27 01:00:46
(1 month ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐ฉ๐ช
klaus_ph
2026-09-27 00:16:08
(1 month ago)
2026-09-25 22:50:12,943 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.142.44.152
...
Bad Web Bot
๐ฎ๐น
Inartis
2026-09-22 16:20:37
(1 month ago)
34.142.44.152 - - [22/Sep/2026:18:20:35 +0200] "GET /.env.example HTTP/1.1" 403 5023 "-" "crusader-worker/1.0"
...
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 16:15:07
(1 month ago)
Unauthorized SSH login attempts
Brute-Force
SSH
๐จ๐ฆ
SoteriaCovenant
2026-09-22 15:53:07
(1 month ago)
Automated probe: /.env.save on Soteria Global infrastructure. No vulnerable software present.
Web App Attack
๐ซ๐ท
dwmp
2026-09-22 15:27:42
(1 month ago)
Url probing: /.env.example
Web App Attack
๐ฉ๐ช
webanyone
2026-09-22 15:17:47
(1 month ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐ฌ๐ง
thetomtaylor.co.uk
2026-09-22 15:08:02
(1 month ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 15:00:32
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.142.44.152 (152.44.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:00:29.421993 2026] [security2:error] [pid 29937:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.44.152 (152.44.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:00:29.421993 2026] [security2:error] [pid 29937:tid 29937] [client 34.142.44.152:34872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mardensmith.com"] [uri "/.env"] [unique_id "arKYDUOnHTxrEb3nnxmFTAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ท๐ด
iulianh
2026-09-22 14:48:02
(1 month ago)
80,443
Brute-Force
SSH
๐ฉ๐ช
webanyone
2026-09-22 14:47:54
(1 month ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 14:44:07
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.142.44.152 (152.44.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:44:02.869433 2026] [security2:error] [pid 13970:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.44.152 (152.44.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:44:02.869433 2026] [security2:error] [pid 13970:tid 13970] [client 34.142.44.152:41056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.acraloc.com"] [uri "/.env.example"] [unique_id "arKUMqrzZIucU9fDznLfuAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-09-22 14:29:09
(1 month ago)
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please ...
show more
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /.env.prod (+12 more) | 2026-09-22 14:29 UTC
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 14:17:55
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.142.44.152 (152.44.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:17:52.326441 2026] [security2:error] [pid 13719:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.44.152 (152.44.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:17:52.326441 2026] [security2:error] [pid 13719:tid 13835] [client 34.142.44.152:48514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kimbleproperties.com"] [uri "/.env.backup"] [unique_id "arKOECcExj3DI8hY61HqHwAAAlA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-22 13:58:53
(1 month ago)
cloudlinux2 fail2ban: 2026-09-22 15:44:24,560 fail2ban.actions [1598]: NOTICE [plesk-modsecurity] Unban 35.187.247.234cloudlinux2 fail2ban: 2026-09-22 15:45:17,341 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.142.44.15 ...
show more
cloudlinux2 fail2ban: 2026-09-22 15:44:24,560 fail2ban.actions [1598]: NOTICE [plesk-modsecurity] Unban 35.187.247.234cloudlinux2 fail2ban: 2026-09-22 15:45:17,341 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.142.44.152 - 2026-09-22 15:45:17cloudlinux2 fail2ban: 2026-09-22 15:45:17,361 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.142.44.152 - 2026-09-22 15:45:17cloudlinux2 fail2ban: 2026-09-22 15:45:17,351 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.142.44.152 - 2026-09-22 15:45:17cloudlinux2 fail2ban: 2026-09-22 15:45:17,314 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.142.44.152 - 2026-09-22 15:45:17cloudlinux2 fail2ban: 2026-09-22 15:45:17,372 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.142.44.152 - 2026-09-22 15:45:17cloudlinux2 fail2ban: 2026-09-22 15:45:17,323 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.142.44.152 - 2026-09-22 15:45:17cloudlinux2 fail
show less
Brute-Force