๐ณ๐ฑ
debestelapp
2026-09-08 13:30:13
(1 month ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-08 06:58:38
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.106.172.184 (184.172.106.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.172.184 (184.172.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 02:58:30.991715 2026] [security2:error] [pid 12483:tid 12483] [client 34.106.172.184:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.frogmouthatx.com"] [uri "/.env.old"] [unique_id "ap-yFvHQq3F1T7vT1HfSDAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
sweplox.se
2026-09-06 08:23:27
(1 month ago)
Ip 34.106.172.184 performed 'crowdsecurity/http-sensitive-files' (5 events over 37.091971ms) at 2026 ...
show more
Ip 34.106.172.184 performed 'crowdsecurity/http-sensitive-files' (5 events over 37.091971ms) at 2026-09-06 08:23:26.653467002 +0000 UTC
show less
Hacking
๐ซ๐ท
Jager
2026-09-06 06:20:51
(1 month ago)
Blocked by CrowdSec on homelab for scenario: crowdsecurity/http-sensitive-files
Brute-Force
Port Scan
Web App Attack
๐ซ๐ท
COMAITE
2026-09-06 06:16:44
(1 month ago)
Suspicious URL access.
Web App Attack
๐ง๐พ
lns.bz
2026-09-06 06:14:41
(1 month ago)
.env scanning [BY]
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-06 03:49:50
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.106.172.184 (184.172.106.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.172.184 (184.172.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:49:42.706060 2026] [security2:error] [pid 256171:tid 256197] [client 34.106.172.184:57928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.fishrapper.com"] [uri "/.env.backup"] [unique_id "apzi1ihFH94LSFzdoC1_vQAAANU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-09-06 03:05:19
(1 month ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-09-06 02:59:15
(1 month ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-06 02:43:30
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.106.172.184 (184.172.106.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.172.184 (184.172.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:43:24.512865 2026] [security2:error] [pid 10710:tid 10710] [client 34.106.172.184:41014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adamsclothiers.com"] [uri "/wp-config.php.swp"] [unique_id "apzTTO2URB8E-oT-EEvq7gAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-09-06 02:35:59
(1 month ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.env (+10 more) | 2026-09-06 02:35 UTC
show less
Hacking
Web App Attack
๐จ๐ฆ
Anytech
2026-09-06 02:29:51
(1 month ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-06 02:24:25
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.106.172.184 (184.172.106.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.172.184 (184.172.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:24:19.543290 2026] [security2:error] [pid 20478:tid 20478] [client 34.106.172.184:45712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "contentdividend.com"] [uri "/wp-config.php.swp"] [unique_id "apzO01Oe5Ul-NSja0k4TSwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
mouafiq
2026-09-06 01:54:27
(1 month ago)
2026-09-06 01:54:27,135 15486 INFO ? werkzeug: 34.106.172.184 - - [06/Sep/2026 01:54:27] "GET /.env. ...
show more
2026-09-06 01:54:27,135 15486 INFO ? werkzeug: 34.106.172.184 - - [06/Sep/2026 01:54:27] "GET /.env.local HTTP/1.0" 404 - 1 0.005 0.013
2026-09-06 01:54:27,141 15395 INFO ? werkzeug: 34.106.172.184 - - [06/Sep/2026 01:54:27] "GET /.env.production HTTP/1.0" 404 - 1 0.010 0.012
2026-09-06 01:54:27,157 15395 INFO ? werkzeug: 34.106.172.184 - - [06/Sep/2026 01:54:27] "GET /.env HTTP/1.0" 404 - 1 0.003 0.010
2026-09-06 01:54:27,164 15486 INFO ? werkzeug: 34.106.172.184 - - [06/Sep/2026 01:54:27] "GET /.env.bak HTTP/1.0" 404 - 1 0.008 0.008
2026-09-06 01:54:27,177 15395 INFO ? werkzeug: 34.106.172.184 - - [06/Sep/2026 01:54:27] "GET /.env.example HTTP/1.0" 404 - 1 0.003 0.014
show less
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-09-06 01:18:43
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.106.172.184 (184.172.106.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.172.184 (184.172.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:18:35.961561 2026] [security2:error] [pid 24207:tid 24207] [client 34.106.172.184:39374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sundollsforever.org"] [uri "/.env.dev"] [unique_id "apy_a8kQTy8bCg7GmxqjtwAAAGc"]
show less
Brute-Force
Bad Web Bot
Web App Attack