🇺🇸
TPI-Abuse
2026-09-06 03:52:01
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.70.236.23 (23.236.70.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.70.236.23 (23.236.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:51:52.934919 2026] [security2:error] [pid 15940:tid 15940] [client 34.70.236.23:52712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "creationorevolution.net"] [uri "/.env.production"] [unique_id "apzjWM2SBBhYcJun6fV1XwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
arsonist
2026-09-06 03:28:11
(1 hour ago)
This IP accessed the path /.env.prod, which is banned. Powered by ListenCaddy
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 03:22:01
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.70.236.23 (23.236.70.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.70.236.23 (23.236.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:21:55.439878 2026] [security2:error] [pid 1003:tid 1003] [client 34.70.236.23:58238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dcwenger.com"] [uri "/wp-config.php~"] [unique_id "apzcU1cchGLoGMrJ_krGwQAAAF4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-09-06 02:36:39
(2 hours ago)
34.70.236.23 - - [06/Sep/2026:05:36:38 +0300] "GET /actuator/configprops HTTP/2.0" 404 201 "-" "crus ...
show more
34.70.236.23 - - [06/Sep/2026:05:36:38 +0300] "GET /actuator/configprops HTTP/2.0" 404 201 "-" "crusader-worker/1.0"
34.70.236.23 - - [06/Sep/2026:05:36:38 +0300] "GET /storage/logs/laravel.log HTTP/2.0" 403 146 "-" "crusader-worker/1.0"
...
show less
Web App Attack
🇷🇸
Smel
2026-09-06 01:48:03
(3 hours ago)
Unauthorized Probe/Connection, Hack -
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-09-06 01:37:00
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.70.236.23 (23.236.70.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.70.236.23 (23.236.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:36:52.021265 2026] [security2:error] [pid 394:tid 394] [client 34.70.236.23:36338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "munchiwrapcom.lasertherapyoc.com"] [uri "/.env"] [unique_id "apzDtPoEsVD96YLGI9V5hQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
MyGlobalFlowers
2026-09-06 01:16:16
(3 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
ELYAZ
2026-09-06 01:02:13
(4 hours ago)
(y3) Failed access -byebye- from 34.70.236.23 (US/United States/23.236.70.34.bc.googleusercontent.co ...
show more
(y3) Failed access -byebye- from 34.70.236.23 (US/United States/23.236.70.34.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
🇩🇪
Gwyneth Llewelyn
2026-09-06 00:16:03
(4 hours ago)
2026/09/06 01:15:54 [error] 380594#380594: *3106783 access forbidden by rule, client: 34.70.236.23, ...
show more
2026/09/06 01:15:54 [error] 380594#380594: *3106783 access forbidden by rule, client: 34.70.236.23, server: api.betatechnologies.info, request: "GET /.env HTTP/2.0", host: "api.betatechnologies.info"
34.70.236.23 - - [06/Sep/2026:01:15:54 +0100] "GET /.env HTTP/2.0" 403 95 "-" "crusader-worker/1.0"
2026/09/06 01:16:01 [error] 380594#380594: *3106798 access forbidden by rule, client: 34.70.236.23, server: api.betatechnologies.info, request: "GET //.env HTTP/2.0", host: "api.betatechnologies.info"
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 23:51:36
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.70.236.23 (23.236.70.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.70.236.23 (23.236.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 19:51:29.652597 2026] [security2:error] [pid 7585:tid 7585] [client 34.70.236.23:44332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "obfetal.com.utilis.net"] [uri "/.env.dev"] [unique_id "apyrAbtzsONj12XfoGS3IwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
webanyone
2026-09-05 22:46:50
(6 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇳🇱
e.fierstra
2026-09-05 22:38:25
(6 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-05 22:13:07
(6 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
mnsf
2026-09-05 22:06:02
(6 hours ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇮🇹
CoreTech srl
2026-09-05 21:48:57
(7 hours ago)
cloudlinux2 fail2ban: 2026-09-05 23:43:47,618 fail2ban.filter [1594]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-05 23:43:47,618 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 170.64.135.41 - 2026-09-05 23:43:47cloudlinux2 fail2ban: 2026-09-05 23:43:56,122 fail2ban.actions [1594]: NOTICE [plesk-modsecurity] Unban 34.19.156.178cloudlinux2 fail2ban: 2026-09-05 23:43:47,562 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 170.64.135.41 - 2026-09-05 23:43:47cloudlinux2 fail2ban: 2026-09-05 23:44:06,159 fail2ban.actions [1594]: NOTICE [plesk-modsecurity] Unban 34.14.138.241cloudlinux2 fail2ban: 2026-09-05 23:44:02,142 fail2ban.actions [1594]: NOTICE [plesk-modsecurity] Unban 34.39.142.9cloudlinux2 fail2ban: 2026-09-05 23:44:14,194 fail2ban.actions [1594]: NOTICE [plesk-modsecurity] Unban 34.81.175.111cloudlinux2 fail2ban: 2026-09-05 23:44:10,176 fail2ban.actions [1594]: NOTICE [plesk-modsecurity] Unban 8.234.163.233cloudlinux2 fail2ban: 2026-09-05 23:44:14,205 fail2ban.actions [1594]: NOTICE [plesk-modsecurity] U
show less
Brute-Force