๐บ๐ธ
TPI-Abuse
2026-09-23 01:54:43
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.45.85.134 (134.85.45.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.45.85.134 (134.85.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 21:54:38.248741 2026] [security2:error] [pid 17917:tid 17917] [client 34.45.85.134:34852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wyndover.photo"] [uri "/@fs/src/.env"] [unique_id "arMxXj8fgdZnJtSyLBv1NgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
daveoctober
2026-09-22 21:41:10
(8 hours ago)
October Sentinel: honeypot triggered
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 19:37:04
(11 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐บ๐ธ
TAY
2026-09-22 17:44:20
(12 hours ago)
34.45.85.134 - - [23/Sep/2026:01:44:15 +0800] "GET /api/console/api_server?sense_version=%40%40SENSE ...
show more
34.45.85.134 - - [23/Sep/2026:01:44:15 +0800] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/1.1" 404 42794 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
34.45.85.134 - - [23/Sep/2026:01:44:16 +0800] "GET /assets../.env HTTP/1.1" 404 42716 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.45.85.134 - - [23/Sep/2026:01:44:17 +0800] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/1.1" 404 42794 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.45.85.134 - - [23/Sep/2026:01:44:17 +0800] "GET /static/../../../a/../../../../.env HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.45.85.134 - - [23/Sep/2026:01:44:17 +0800] "GET /static/../../../a/../../../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
34.45.85.134 - - [23/Sep/2026:
...
show less
Brute-Force
๐ฉ๐ช
Hazzard
2026-09-22 17:27:36
(13 hours ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-09-22 15:07:50
(15 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.45.85.134 (134.85.45.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:949110) triggered by 34.45.85.134 (134.85.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:07:42.259218 2026] [security2:error] [pid 7335:tid 7335] [client 34.45.85.134:54988] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.mijn.photo"] [uri "/.env.old"] [unique_id "arKZvtjL0L-763NPBEGKhAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 13:45:30
(16 hours ago)
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, Bad ...
show more
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=24,4, Rate=12,6, Diversity=16,2, CanaryOverride=90.
show less
Web App Attack
DDoS Attack
Bad Web Bot
๐บ๐ธ
TAY
2026-09-22 13:33:35
(17 hours ago)
34.45.85.134 - - [22/Sep/2026:21:33:33 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2050 "-" "Mozill ...
show more
34.45.85.134 - - [22/Sep/2026:21:33:33 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.45.85.134 - - [22/Sep/2026:21:33:33 +0800] "GET /_nuxt/../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.45.85.134 - - [22/Sep/2026:21:33:33 +0800] "GET /media../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
34.45.85.134 - - [22/Sep/2026:21:33:33 +0800] "GET /static../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.45.85.134 - - [22/Sep/2026:21:33:33 +0800] "GET /files../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.45.85.134 - - [22/Sep/2026:21:33:34 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (co
...
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-22 11:46:41
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.45.85.134 (134.85.45.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.45.85.134 (134.85.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:46:38.413341 2026] [security2:error] [pid 31931:tid 31931] [client 34.45.85.134:39608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aiamur.photo"] [uri "/.env.example"] [unique_id "arJqnqbZOo3Lw06ogtMb9AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TAY
2026-09-22 11:00:42
(19 hours ago)
34.45.85.134 - - [22/Sep/2026:19:00:41 +0800] "GET /assets../.env HTTP/1.1" 404 7811 "-" "Mozilla/5. ...
show more
34.45.85.134 - - [22/Sep/2026:19:00:41 +0800] "GET /assets../.env HTTP/1.1" 404 7811 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.45.85.134 - - [22/Sep/2026:19:00:41 +0800] "GET /uploads../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.45.85.134 - - [22/Sep/2026:19:00:41 +0800] "GET /images../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.45.85.134 - - [22/Sep/2026:19:00:42 +0800] "GET /img../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
34.45.85.134 - - [22/Sep/2026:19:00:42 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 7811 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.45.85.134 - - [22/Sep/2026:19:00:42 +0800] "GET /api/w/admins/jobs_u/get_log_file/..
...
show less
Brute-Force
๐ฌ๐ง
consul.to
2026-09-22 09:33:26
(21 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TAY
2026-09-22 09:21:07
(21 hours ago)
34.45.85.134 - - [22/Sep/2026:17:21:06 +0800] "GET /wp-config.php.swp HTTP/1.1" 404 2050 "-" "Mozill ...
show more
34.45.85.134 - - [22/Sep/2026:17:21:06 +0800] "GET /wp-config.php.swp HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.45.85.134 - - [22/Sep/2026:17:21:06 +0800] "GET /wp-config.php~ HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.45.85.134 - - [22/Sep/2026:17:21:07 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.45.85.134 - - [22/Sep/2026:17:21:07 +0800] "GET /_nuxt/../.env HTTP/1.1" 404 2050 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.45.85.134 - - [22/Sep/2026:17:21:07 +0800] "GET /static../.env HTTP/1.1" 404 2050 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.45.85.134 - - [22/Sep/2026:17:21:07 +0800] "GET /@fs/../.env?import&raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
...
show less
Brute-Force
๐ณ๐ฑ
Site.eu
2026-09-22 08:16:10
(22 hours ago)
Excessive 404/403 errors
Brute-Force
๐บ๐ธ
TAY
2026-09-22 08:03:35
(22 hours ago)
34.45.85.134 - - [22/Sep/2026:16:03:34 +0800] "GET /appearance/../../proc/self/environ HTTP/1.1" 400 ...
show more
34.45.85.134 - - [22/Sep/2026:16:03:34 +0800] "GET /appearance/../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.45.85.134 - - [22/Sep/2026:16:03:34 +0800] "GET /appearance/../../.env HTTP/1.1" 400 2057 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.45.85.134 - - [22/Sep/2026:16:03:35 +0800] "GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/1.1" 404 7837 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.45.85.134 - - [22/Sep/2026:16:03:35 +0800] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.45.85.134 - - [22/Sep/2026:16:03:35 +0800] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/1.1" 404
...
show less
Brute-Force
๐ฒ๐พ
Rizzy
2026-09-22 06:28:30
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack