🇳🇱
homeshowdomain.nl
2026-09-05 22:00:36
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-04.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-04 15:17:53
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.145.200 (200.145.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:17:48.553711 2026] [security2:error] [pid 20914:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.145.200 (200.145.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:17:48.553711 2026] [security2:error] [pid 20914:tid 20914] [client 34.23.145.200:45220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.aangfl.com"] [uri "/wp-config.php.swp"] [unique_id "aprhHNOjAn0AwBdqs1eSQQAAAF4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-04 14:47:21
UTC ·
(2 months ago)
(mod_security) mod_security (id:949110) triggered by 34.23.145.200 (US/United States/200.145.23.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 14:44:20
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.145.200 (200.145.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:44:15.000549 2026] [security2:error] [pid 20087:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.145.200 (200.145.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:44:15.000549 2026] [security2:error] [pid 20087:tid 20087] [client 34.23.145.200:37574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caravaningfigaro.com"] [uri "/.env.local"] [unique_id "aprZPwDytl2g7jbAnqB4QwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 14:10:43
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.145.200 (200.145.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:10:36.702196 2026] [security2:error] [pid 23178:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.145.200 (200.145.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:10:36.702196 2026] [security2:error] [pid 23178:tid 23178] [client 34.23.145.200:49936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.holboxwhalesharktours.net"] [uri "/.env.dev"] [unique_id "aprRXDsMWhv7tvBL2rCPOAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
danskefilm.dk
2026-09-04 14:00:01
UTC ·
(2 months ago)
wordpress login attempts
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 13:31:44
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.145.200 (200.145.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 09:31:39.388448 2026] [security2:error] [pid 23006:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.145.200 (200.145.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 09:31:39.388448 2026] [security2:error] [pid 23006:tid 23128] [client 34.23.145.200:44872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soluciona.biz"] [uri "/.env.save"] [unique_id "aprIO-K_eLa5AsS1DMl7CgAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-09-04 12:19:08
UTC ·
(2 months ago)
URL Probing: /.env
Web App Attack
🇩🇪
FD-IX
2026-09-04 12:17:13
UTC ·
(2 months ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 10:13:53
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.145.200 (200.145.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:13:49.685010 2026] [security2:error] [pid 15771:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.145.200 (200.145.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:13:49.685010 2026] [security2:error] [pid 15771:tid 15771] [client 34.23.145.200:38490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kalourislawfirm.com"] [uri "/.env"] [unique_id "apqZ3fPcPEH9I73mpeCuLQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-04 10:10:01
UTC ·
(2 months ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-09-04 10:06:13
UTC ·
(2 months ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-09-04 09:26:06
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 09:21:25
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.145.200 (200.145.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:21:20.804297 2026] [security2:error] [pid 435038:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.145.200 (200.145.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:21:20.804297 2026] [security2:error] [pid 435038:tid 435038] [client 34.23.145.200:42588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.al-bukhari.org"] [uri "/wp-config.php.swp"] [unique_id "apqNkHw_p_43C9RAR_o7NwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-04 08:30:11
UTC ·
(2 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack