🇺🇸
TPI-Abuse
2026-09-01 11:23:45
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.104.192.115 (115.192.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.192.115 (115.192.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:23:40.705515 2026] [security2:error] [pid 32537:tid 32537] [client 34.104.192.115:55210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.zombiekillabob.com"] [uri "/.env.old"] [unique_id "apa1vK7rKaXj6Ay3hkld4wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
WizardsToolkit
2026-09-01 11:20:18
(1 day ago)
attempted to access /storage/logs/laravel.log
Web App Attack
🇫🇷
masterguru
2026-09-01 11:04:18
(1 day ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇦🇺
clapper
2026-09-01 11:03:23
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 34.104.192.115 (JP/Japan/115.192.104.34.bc.goog ...
show more
(mod_security) mod_security (id:949110) triggered by 34.104.192.115 (JP/Japan/115.192.104.34.bc.googleusercontent.com): 3 in the last 3600 secs; ID: LUC
show less
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-01 10:58:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.104.192.115 (115.192.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.192.115 (115.192.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:58:22.226761 2026] [security2:error] [pid 17858:tid 17858] [client 34.104.192.115:34030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.astariafilms.com"] [uri "/.env.old"] [unique_id "apavzlyFiBp7nvfxvUFaUAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-01 10:01:44
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 09:47:24
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.104.192.115 (115.192.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.192.115 (115.192.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:47:19.571907 2026] [security2:error] [pid 32205:tid 32205] [client 34.104.192.115:48588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "slattery-law.com"] [uri "/.env.backup"] [unique_id "apafJ9q3vog2t2m8FEapvAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-01 09:33:47
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇦🇺
paulshipley.com.au
2026-09-01 09:17:34
(1 day ago)
[Tue Sep 01 19:17:34.216391 2026] [security2:error] [pid 230272] [client 34.104.192.115:37406] [clie ...
show more
[Tue Sep 01 19:17:34.216391 2026] [security2:error] [pid 230272] [client 34.104.192.115:37406] [client 34.104.192.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "stkildashule.org.au"] [uri "/.env.old"] [unique_id "apaYLntA7TsTcI6G3nHpTAAAABE"]
...
show less
Web App Attack
🇸🇪
vaia.cloud
2026-09-01 08:25:02
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇫🇷
pm33
2026-09-01 07:25:38
(1 day ago)
Unsolicited connection attempts or aggressive port scan.
Port Scan
🇺🇸
Lee Daniel
2026-09-01 06:18:40
(1 day ago)
34.104.192.115 - - [01/Sep/2026:02:18:39 -0400] "GET /.env HTTP/1.1" 403 6293 "-" "crusader-worker/1 ...
show more
34.104.192.115 - - [01/Sep/2026:02:18:39 -0400] "GET /.env HTTP/1.1" 403 6293 "-" "crusader-worker/1.0"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 06:02:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.104.192.115 (115.192.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.192.115 (115.192.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:02:14.749762 2026] [security2:error] [pid 9947:tid 9947] [client 34.104.192.115:39772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.consorciolegal.com"] [uri "/.env.local"] [unique_id "apZqZj0mw1aEFzbjbZPIMgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
Wicard
2026-09-01 04:46:43
(1 day ago)
PHP webshell probe / web application attack. Rapid scanning for vulnerable PHP files and WordPress p ...
show more
PHP webshell probe / web application attack. Rapid scanning for vulnerable PHP files and WordPress paths.
show less
Port Scan
Hacking
Web App Attack
🇵🇱
nakordoni.eu
2026-09-01 04:30:04
(1 day ago)
Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ...
show more
Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: Google LLC (JP), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 66/100.
show less
Bad Web Bot
Web App Attack