๐ฉ๐ช
febrian.de
2026-08-28 21:54:36
(45 minutes ago)
Excessive HTTP(S) probing or bad web bot detected by Fail2Ban
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 21:40:55
(59 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.11.87.150 (150.87.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.87.150 (150.87.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 17:40:50.558896 2026] [security2:error] [pid 3356579:tid 3356658] [client 34.11.87.150:58506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.actiontattooauburn.meanmouse.com"] [uri "/.env.backup"] [unique_id "apIAYpL1xvMbE5J0qfMK_wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-28 20:56:21
(1 hour ago)
34.11.87.150 - - [28/Aug/2026:20:56:19 +0000] "GET /.env.example HTTP/1.1" 302 4917 "-" "crusader-wo ...
show more
34.11.87.150 - - [28/Aug/2026:20:56:19 +0000] "GET /.env.example HTTP/1.1" 302 4917 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 20:31:41
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.87.150 (150.87.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.87.150 (150.87.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 16:31:37.328978 2026] [security2:error] [pid 1590:tid 1590] [client 34.11.87.150:39764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tytiannasanderson.com"] [uri "/.env.dev"] [unique_id "apHwKSD60eZAGjBukbC6hgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
WizardsToolkit
2026-08-28 20:29:21
(2 hours ago)
tried to access forbidden files; attempted to access /storage/logs/laravel.log
Web App Attack
Anonymous
2026-08-28 20:25:02
(2 hours ago)
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, ...
show more
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /crusader-404-probe HTTP/1.1, GET /env HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.backup HTTP/1.1, GET /actuator/env HTTP/1.1
show less
Hacking
Web App Attack
๐ฎ๐น
CoreTech srl
2026-08-28 20:05:33
(2 hours ago)
cloudlinux2 fail2ban: 2026-08-28 21:58:51,483 fail2ban.filter [1478]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-08-28 21:58:51,483 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 58.243.195.203 - 2026-08-28 21:58:51cloudlinux2 fail2ban: 2026-08-28 21:59:45,695 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 13.214.139.225 - 2026-08-28 21:59:45cloudlinux2 fail2ban: 2026-08-28 21:59:45,461 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 13.214.139.225 - 2026-08-28 21:59:45cloudlinux2 fail2ban: 2026-08-28 21:59:45,790 fail2ban.filter [1478]: INFO [recidive] Found 13.214.139.225 - 2026-08-28 21:59:45cloudlinux2 fail2ban: 2026-08-28 21:59:45,703 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Ban 13.214.139.225cloudlinux2 fail2ban: 2026-08-28 21:59:45,676 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 13.214.139.225 - 2026-08-28 21:59:45cloudlinux2 fail2ban: 2026-08-28 21:59:45,685 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 13.214.139.225 - 2026-08-28 21:59:45cloudlinux2 fail2ban:
show less
Brute-Force
๐ซ๐ท
dynamix
2026-08-28 19:53:02
(2 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 18:58:00
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.87.150 (150.87.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.87.150 (150.87.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:57:55.566405 2026] [security2:error] [pid 15187:tid 15187] [client 34.11.87.150:60284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lifeinsmoke.com"] [uri "/.env.old"] [unique_id "apHaM_4SB6_Xh4yBPPPebwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 18:36:48
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.87.150 (150.87.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.87.150 (150.87.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:36:43.784004 2026] [security2:error] [pid 26522:tid 26522] [client 34.11.87.150:60276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "erinsdesignstudio.com"] [uri "/.env.backup"] [unique_id "apHVOxlbzCKWFnAKokUt8wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-28 18:05:05
(4 hours ago)
suspicious request in access.log
Web App Attack
๐ซ๐ท
HerrWolf
2026-08-28 17:15:04
(5 hours ago)
CrowdSec Detection: crowdsecurity/http-sensitive-files
Web App Attack
๐ณ๐ด
Abuse Buster
2026-08-28 16:15:21
(6 hours ago)
34.11.87.150 - - [28/Aug/2026:18:15:20 +0200] "GET /.env.dev HTTP/1.1" 404 22 "-" "crusader-worker/1 ...
show more
34.11.87.150 - - [28/Aug/2026:18:15:20 +0200] "GET /.env.dev HTTP/1.1" 404 22 "-" "crusader-worker/1.0"
34.11.87.150 - - [28/Aug/2026:18:15:20 +0200] "GET /actuator/configprops HTTP/1.1" 404 22 "-" "crusader-worker/1.0"
34.11.87.150 - - [28/Aug/2026:18:15:20 +0200] "GET /.env.old HTTP/1.1" 404 22 "-" "crusader-worker/1.0"
...
show less
Web App Attack
๐บ๐ธ
MatCat
2026-08-28 16:05:14
(6 hours ago)
Banned by fail2ban: apache-webprobe
Port Scan
Bad Web Bot
๐ฉ๐ช
big-cloud.nl
2026-08-28 16:01:31
(6 hours ago)
Try to access /.env
Web App Attack