|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:08:35.753524 2026] [security2:error] [pid 26172:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:08:35.753524 2026] [security2:error] [pid 26172:tid 26172] [client 34.92.145.116:50986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "simplyexquisitetravels.com"] [uri "/.env"] [unique_id "arK2E67HD0SX0VqHAwcswgAAACU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇪
vaia.cloud
|
|
crowdsecurity/http-sensitive-files
|
Brute-Force
Web App Attack
|
|
🇺🇸
Lee Daniel
|
|
34.92.145.116 - - [22/Sep/2026:12:51:32 -0400] "GET /.env HTTP/1.1" 403 6295 "-" "crusader-worker/1.0"
...
|
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:43:39.123534 2026] [security2:error] [pid 3227:tid 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:43:39.123534 2026] [security2:error] [pid 3227:tid 3227] [client 34.92.145.116:56170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rgnexcore.com"] [uri "/.env.dev"] [unique_id "arKwO5shXFacL_HWIs2MdAAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
[da.kdns.gr] httpd-config-scan: sites=www.nutrijourney.gr; logs=/var/log/httpd/domains/nutrijourney.gr.log; samples=/.env | /.env.backup | /.env.local
|
Hacking
Web App Attack
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
🇫🇷
Lunix
|
|
|
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:43:11.583020 2026] [security2:error] [pid 16890:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:43:11.583020 2026] [security2:error] [pid 16890:tid 16890] [client 34.92.145.116:36820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magiccarpentry.com.citystreetsalon.com"] [uri "/.env.local"] [unique_id "arKT_3lh_cmIjTH29ANTcwAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇦
URAN Publishing Service
|
|
[22/Sep/2026:17:19:20 +0300] -- 34.92.145.116 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.dev HTTP/1.1
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
Nop Nop
|
|
CrowdSec ban: crowdsecurity/http-sensitive-files
|
Port Scan
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:18:50.163767 2026] [security2:error] [pid 10531:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:18:50.163767 2026] [security2:error] [pid 10531:tid 10531] [client 34.92.145.116:34016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furbabieslivesmatter.com"] [uri "/.env.local"] [unique_id "arKAOq-dqRqQMwncuGNNPwAAABU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
WeCloudit-Anti-Abuse
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
|
Web App Attack
Hacking
|
|
🇳🇱
debestelapp
|
|
|
Web App Attack
|
|
🇿🇦
conure.sh
|
|
csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s
|
Web App Attack
|
|
Anonymous
|
|
Automated web scanner. Requested suspicious paths: /.env.save | /.env.old | /actuator/configprops | /crusader-404-probe | /.env.local | /.env.dev | /.env.bak | /.env.production | /_ignition/health-check | /.env | /.env.backup | /storage/logs/laravel. ...
show more
Automated web scanner. Requested suspicious paths: /.env.save | /.env.old | /actuator/configprops | /crusader-404-probe | /.env.local | /.env.dev | /.env.bak | /.env.production | /_ignition/health-check | /.env | /.env.backup | /storage/logs/laravel.log | /actuator/env | /.env.prod | /env | /.env.example. UTC: 2026-09-22 12:42:31.
show less
|
Web App Attack
|
