🇺🇸
TPI-Abuse
2026-08-28 16:00:44
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.145.212.16 (16.212.145.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.145.212.16 (16.212.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 12:00:38.318529 2026] [security2:error] [pid 8031:tid 8031] [client 34.145.212.16:36072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3905ccn.org"] [uri "/.env.prod"] [unique_id "apGwpivmS63sh3AiamalCwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-08-28 15:05:42
(5 hours ago)
Abuse Detected (10)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 14:04:53
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.145.212.16 (16.212.145.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.145.212.16 (16.212.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 10:04:44.564019 2026] [security2:error] [pid 24589:tid 24589] [client 34.145.212.16:33586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.global.ic1.biz"] [uri "/.env.example"] [unique_id "apGVfGMQKm9BbiDTIRKlHAAAAE4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-28 13:45:31
(6 hours ago)
Attempt to access a backup or working file. Pattern match "\\\\. (920500-196)
Hacking
🇺🇸
TPI-Abuse
2026-08-28 13:44:35
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.145.212.16 (16.212.145.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.145.212.16 (16.212.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:44:28.541227 2026] [security2:error] [pid 8781:tid 8781] [client 34.145.212.16:37120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.brooklyntrademarklawyers.karenbernsteinlaw.net"] [uri "/.env.production"] [unique_id "apGQvNKr1pkN1j-aitg6GwAAADk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-08-28 13:25:00
(6 hours ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.145.212.16 (US/United States/16.212.145.34. ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.145.212.16 (US/United States/16.212.145.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/08/28 15:24:58 [error] 1242867#1242867: *732660 access forbidden by rule, client: 34.145.212.16, server: confartigianato.pe.it, request: "GET /wp-config.php~ HTTP/1.1", host: "confartigianato.pe.it"
2026/08/28 15:24:58 [error] 1242868#1242868: *732667 access forbidden by rule, client: 34.145.212.16, server: confartigianato.pe.it, request: "GET /wp-config.php.bak HTTP/1.1", host: "confartigianato.pe.it"
2026/08/28 15:24:58 [error] 1242862#1242862: *732678 access forbidden by rule, client: 34.145.212.16, server: confartigianato.pe.it, request: "GET /wp-config.php.swp HTTP/1.1", host: "confartigianato.pe.it"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-08-28 13:19:22
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.145.212.16 (16.212.145.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.145.212.16 (16.212.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:19:17.473870 2026] [security2:error] [pid 29224:tid 29224] [client 34.145.212.16:46544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jbaydeliveries.jbaycabs.com"] [uri "/.env"] [unique_id "apGK1dqfLUN-DvV0GQdKOwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
wpadm3
2026-08-28 12:48:31
(7 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇮🇹
abuseiphack
2026-08-28 12:46:32
(7 hours ago)
Automatic report for brute force attack
Web App Attack
🇬🇧
poundawebsiteltd
2026-08-28 12:44:35
(7 hours ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.145.212 ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.145.212.16 (US/United States/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 34.145.212.16 (US/United States/16.212.145.34.bc.googleusercontent.com): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇬🇧
Celtic
2026-08-28 12:39:34
(7 hours ago)
Blocked by Fail2Ban with Jail (plesk-modsecurity)
Brute-Force
SSH
🇧🇾
lns.bz
2026-08-28 12:30:12
(7 hours ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 12:06:04
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.145.212.16 (16.212.145.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.145.212.16 (16.212.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 08:05:57.667450 2026] [security2:error] [pid 7545:tid 7545] [client 34.145.212.16:59772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fly805.com.inetbrain.com"] [uri "/.env.prod"] [unique_id "apF5pWrq21IZipYKgZi8MgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-28 11:51:31
(8 hours ago)
[28/Aug/2026:14:51:30 +0300] -- 34.145.212.16 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET / ...
show more
[28/Aug/2026:14:51:30 +0300] -- 34.145.212.16 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /wp-config.php.bak HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇳🇱
tpjg
2026-08-28 11:28:43
(8 hours ago)
Automated: 15 requests with error status in 120s window from 34.145.212.16.
Evidence: /crusader-404- ...
show more
Automated: 15 requests with error status in 120s window from 34.145.212.16.
Evidence: /crusader-404-probe:404,/.env.example:404,/.env.dev:404,/actuator/configprops:404,/wp-config.php.bak:404,/.env.old:404,/.env.save:404,/_ignition/health-check:404,/wp-config.php.swp:404,/.env.bak:404,/.env.prod:404,/.env.production:404,/.env.backup:404,/.env.local:404,/.env:404
show less
Web App Attack