2026-09-02 16:07:09
(3 minutes ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 13:52:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.21.162.234 (234.162.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.162.234 (234.162.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:52:46.640012 2026] [security2:error] [pid 27572:tid 27572] [client 34.21.162.234:50396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.robertlundquist.com"] [uri "/.env"] [unique_id "apbYrgjHG3OFDd92z1EK4gAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 12:33:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.21.162.234 (234.162.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.162.234 (234.162.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:33:07.524367 2026] [security2:error] [pid 24319:tid 24319] [client 34.21.162.234:48536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carminestogo.com"] [uri "/wp-config.php~"] [unique_id "apbGA7QOTvQoKiWcNoJDEQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-09-01 12:15:09
(1 day ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 11:04:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.21.162.234 (234.162.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.162.234 (234.162.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:04:04.737015 2026] [security2:error] [pid 21553:tid 21553] [client 34.21.162.234:47528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.musicpolitan.com"] [uri "/.env.example"] [unique_id "apaxJE7W9eKLPEyYgaCbQgAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-09-01 11:03:10
(1 day ago)
Attempted access to sensitive endpoint (/.env.example) detected. Automated scan or unauthorized prob ...
show more
Attempted access to sensitive endpoint (/.env.example) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 10:26:04
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.21.162.234 (234.162.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.162.234 (234.162.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:25:57.646317 2026] [security2:error] [pid 25718:tid 25718] [client 34.21.162.234:53540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "airwatering.grancanariaholidays.com"] [uri "/.env.local"] [unique_id "apaoNV_jeAN0nbV0sNfDUAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-01 09:39:13
(1 day ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.21.162.234 (SG/Singapore/234.162.2 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.21.162.234 (SG/Singapore/234.162.21.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196)
show less
Hacking
2026-09-01 07:45:50
(1 day ago)
[server.tmg.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env | /.env.local | /.e ...
show more
[server.tmg.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env | /.env.local | /.env.production
show less
Hacking
Web App Attack
🇩🇪
tentwentyfour
2026-09-01 06:20:03
(1 day ago)
Blocked for probing for sensitive web application components
Brute-Force
Web App Attack
2026-09-01 04:23:03
(1 day ago)
Bot / scanning and/or hacking attempts: GET /wp-config.php.bak HTTP/1.1
Hacking
Web App Attack
2026-09-01 04:20:25
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇺🇸
TPI-Abuse
2026-09-01 04:02:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.21.162.234 (234.162.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.162.234 (234.162.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:02:49.811611 2026] [security2:error] [pid 6620:tid 6620] [client 34.21.162.234:36100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kontikimotorcycles.com"] [uri "/.env.backup"] [unique_id "apZOaYomSTQVx5EqIKGoLwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
paissangroup
2026-09-01 04:00:36
(1 day ago)
Multiple WAF Violations
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-01 03:51:37
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking