๐บ๐ธ
TPI-Abuse
2026-08-01 17:23:09
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.250.200 (200.250.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.250.200 (200.250.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:23:00.951207 2026] [security2:error] [pid 17034:tid 17034] [client 34.104.250.200:52554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magazine.angelabcomics.com"] [uri "/.env.example"] [unique_id "am4rdBy1PGswvlhNfCQHBQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
edena
2026-08-01 16:45:31
(3 hours ago)
34.104.250.200 - - [01/Aug/2026:18:45:29 +0200] "GET /.env.local HTTP/1.1" 403 303 "-" "crusader-wor ...
show more
34.104.250.200 - - [01/Aug/2026:18:45:29 +0200] "GET /.env.local HTTP/1.1" 403 303 "-" "crusader-worker/1.0"
34.104.250.200 - - [01/Aug/2026:18:45:29 +0200] "GET /.env HTTP/1.1" 403 303 "-" "crusader-worker/1.0"
34.104.250.200 - - [01/Aug/2026:18:45:29 +0200] "GET /.env.production HTTP/1.1" 403 303 "-" "crusader-worker/1.0"
...
show less
Web App Attack
Bad Web Bot
๐บ๐ฆ
URAN Publishing Service
2026-08-01 16:08:36
(4 hours ago)
Multiple unauthorized connection attempts
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-01 16:07:06
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.250.200 (200.250.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.250.200 (200.250.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:07:02.536626 2026] [security2:error] [pid 1496364:tid 1496364] [client 34.104.250.200:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kidswithcamerasmovie.com"] [uri "/.env.local"] [unique_id "am4Zplt6bgGH9b491JLoQwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-01 15:50:53
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.250.200 (200.250.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.250.200 (200.250.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:50:49.682854 2026] [security2:error] [pid 939793:tid 939804] [client 34.104.250.200:55504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bakmail.net"] [uri "/.env.example"] [unique_id "am4V2bXbaZKzpSCNgc_MJAAAAUQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-01 15:15:49
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.250.200 (200.250.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.250.200 (200.250.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:15:44.668653 2026] [security2:error] [pid 710921:tid 710921] [client 34.104.250.200:57280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pondplain.org"] [uri "/.env.dev"] [unique_id "am4NoAo0Y7WOVP3vr-Av0AAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
raph
2026-08-01 15:12:16
(5 hours ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
๐บ๐ธ
infra-monitor
2026-08-01 15:00:04
(5 hours ago)
Automated ban via infra-monitor: suspicious-probe
Port Scan
๐จ๐ญ
zynex
2026-08-01 14:33:18
(5 hours ago)
URL Probing: /.env
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-01 14:12:38
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.250.200 (200.250.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.250.200 (200.250.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:12:33.710415 2026] [security2:error] [pid 2773347:tid 2773347] [client 34.104.250.200:57798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "franchiseconsultants.biz"] [uri "/.env"] [unique_id "am3-0eWzzFzU_goc-nxTdAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-08-01 14:00:47
(6 hours ago)
[SatAug0116:00:45.2277102026][security2:error][pid1595516:tid1595622][client34.104.250.200:0]ModSecu ...
show more
[SatAug0116:00:45.2277102026][security2:error][pid1595516:tid1595622][client34.104.250.200:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"giftech.ch.136-243-54-122.cpanel.site\"][uri\"/.env.production\"][unique_id\"am38DUxReYpyPpqxlCm0bwAAAQQ\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ซ๐ท
masterguru
2026-08-01 13:56:54
(6 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐จ๐ญ
Origon
2026-08-01 13:36:31
(6 hours ago)
http-sensitive-files - IP: 34.104.250.200 - time="2026-08-01T15:36:30+02:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 34.104.250.200 - time="2026-08-01T15:36:30+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.104.250.200 (JP/396982) : 4h ban on Ip 34.104.250.200" module=db
show less
Web App Attack
๐ท๐บ
DZBOT
2026-08-01 13:29:34
(7 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-08-01 13:17:21
(7 hours ago)
Try to access /.env
Web App Attack