🇺🇸
TPI-Abuse
2026-08-01 14:53:20
(12 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.100.202.145 (145.202.100.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.202.145 (145.202.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:53:16.373595 2026] [security2:error] [pid 32236:tid 32236] [client 34.100.202.145:33586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brazilianbikinis.com"] [uri "/.env.old"] [unique_id "am4IXOKmB7LR7twQ74sZ9AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-08-01 14:45:03
(20 minutes ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 14:16:21
(49 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.100.202.145 (145.202.100.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.202.145 (145.202.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:16:15.540009 2026] [security2:error] [pid 2251626:tid 2251626] [client 34.100.202.145:47004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgegourmet.visionremota.info"] [uri "/.env.local"] [unique_id "am3_r035pJj_u41DuUK_7wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-08-01 13:47:23
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-01 13:44:07
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.100.202.145 (145.202.100.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.202.145 (145.202.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 09:44:02.578034 2026] [security2:error] [pid 834365:tid 834365] [client 34.100.202.145:33824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lynellejonsson.com"] [uri "/.env.example"] [unique_id "am34IiMr8yJDZe4qfOGqxgAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-08-01 13:43:41
(1 hour ago)
http-sensitive-files - IP: 34.100.202.145 - time="2026-08-01T15:43:40+02:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 34.100.202.145 - time="2026-08-01T15:43:40+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.100.202.145 (IN/396982) : 4h ban on Ip 34.100.202.145" module=db
show less
Web App Attack
🇫🇷
dynamix
2026-08-01 13:22:49
(1 hour ago)
Multiple WAF Violations
Web App Attack
🇳🇱
e.fierstra
2026-08-01 13:18:34
(1 hour ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-01 13:16:15
(1 hour ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 13:15:12
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.100.202.145 (145.202.100.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.202.145 (145.202.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 09:15:06.103951 2026] [security2:error] [pid 2077982:tid 2077982] [client 34.100.202.145:33818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.buildpower.theknowledgemaster.com"] [uri "/.env.backup"] [unique_id "am3xWvJt-JK64leJ3q-pgQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
secnicholas
2026-08-01 12:25:56
(2 hours ago)
Banned by CrowdSec - scenario: crowdsecurity/http-sensitive-files
Port Scan
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 12:17:05
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.100.202.145 (145.202.100.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.202.145 (145.202.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 08:17:01.972724 2026] [security2:error] [pid 2128433:tid 2128433] [client 34.100.202.145:46534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.exresearch.com.ieas.org"] [uri "/.env.dev"] [unique_id "am3jvaYm7owQMKWUsPYwOAAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-08-01 12:00:12
(3 hours ago)
Web attack/malicious scanning detected
Web App Attack
2026-08-01 11:45:02
(3 hours ago)
suspicious request in access.log
Web App Attack
🇫🇷
masterguru
2026-08-01 11:27:25
(3 hours ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.100.202.145 (IN/India/145.202.100. ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.100.202.145 (IN/India/145.202.100.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking