🇺🇸
TPI-Abuse
2026-08-01 16:31:55
(42 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.65.4.82 (82.4.65.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.4.82 (82.4.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:31:47.929758 2026] [security2:error] [pid 1913013:tid 1913013] [client 34.65.4.82:37422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moontouchmassage.com"] [uri "/.env.dev"] [unique_id "am4fc0DE3ACDuUw4iP4E_QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-08-01 16:02:51
(1 hour ago)
Login credentials theft attempt
Hacking
🇨🇦
polycoda
2026-08-01 15:51:44
(1 hour ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 15:39:36
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.65.4.82 (82.4.65.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.4.82 (82.4.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:39:30.522971 2026] [security2:error] [pid 1928610:tid 1928610] [client 34.65.4.82:42586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tijuana-bibles.tijuanabible.org"] [uri "/.env.bak"] [unique_id "am4TMkgVztIvPBwIsPlnLwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-08-01 15:20:55
(1 hour ago)
[SatAug0117:20:50.5086262026][security2:error][pid1683896:tid1684013][client34.65.4.82:0]ModSecurity ...
show more
[SatAug0117:20:50.5086262026][security2:error][pid1683896:tid1684013][client34.65.4.82:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcontacts.atelier-lara.ch\"][uri\"/.env.old\"][unique_id\"am4O0kjdKiDTa98IHwFtjgAAARU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-01 15:09:57
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.4.82 (82.4.65.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.4.82 (82.4.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:09:52.598453 2026] [security2:error] [pid 2484957:tid 2484957] [client 34.65.4.82:36558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeffgambill.com"] [uri "/.env.dev"] [unique_id "am4MQJnbd8jNBmnd0BCAlQAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-08-01 14:59:47
(2 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇫🇷
COMAITE
2026-08-01 14:50:30
(2 hours ago)
Suspicious URL access.
Web App Attack
🇳🇱
e.fierstra
2026-08-01 14:29:50
(2 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-08-01 14:20:59
(2 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
Matthew Ping
2026-08-01 14:15:41
(2 hours ago)
ModSecurity rule 949110 triggered on dedicated4785. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
🇫🇷
masterguru
2026-08-01 14:13:31
(3 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇩🇪
IVski
2026-08-01 13:56:17
(3 hours ago)
IVski WAF | Sensitive file probe detected - looking for .env
Port Scan
Brute-Force
Web App Attack
🇳🇱
ParaBug
2026-08-01 13:25:28
(3 hours ago)
34.65.4.82 - - [01/Aug/2026:15:25:28 +0200] "GET /.env.old HTTP/1.1" 301 4703 "-" "crusader-worker/1 ...
show more
34.65.4.82 - - [01/Aug/2026:15:25:28 +0200] "GET /.env.old HTTP/1.1" 301 4703 "-" "crusader-worker/1.0"
...
show less
Phishing
Brute-Force
Web App Attack
🇺🇸
Lee Daniel
2026-08-01 13:08:07
(4 hours ago)
34.65.4.82 - - [01/Aug/2026:09:08:07 -0400] "GET /.env HTTP/1.1" 403 6363 "-" "crusader-worker/1.0"
...
show more
34.65.4.82 - - [01/Aug/2026:09:08:07 -0400] "GET /.env HTTP/1.1" 403 6363 "-" "crusader-worker/1.0"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack