🇧🇪
voormedia
2026-08-28 18:56:42
(2 hours ago)
Accessed trap at '/actuator/env'
Web App Attack
2026-08-28 16:21:11
(4 hours ago)
Bot / seems abusive / Apache connections: 35
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
2026-08-28 14:49:27
(6 hours ago)
2026/08/28 11:49:26 [error] 2325134#2325134: *108153 access forbidden by rule, client: 34.80.29.251, ...
show more
2026/08/28 11:49:26 [error] 2325134#2325134: *108153 access forbidden by rule, client: 34.80.29.251, server: pgadmin4.sorotop.com.br, request: "GET /.env.backup HTTP/1.1", host: "pgadmin4.sorotop.com.br"
2026/08/28 11:49:26 [error] 2325137#2325137: *108157 access forbidden by rule, client: 34.80.29.251, server: pgadmin4.sorotop.com.br, request: "GET /.env HTTP/1.1", host: "pgadmin4.sorotop.com.br"
2026/08/28 11:49:26 [error] 2325137#2325137: *108155 access forbidden by rule, client: 34.80.29.251, server: pgadmin4.sorotop.com.br, request: "GET /.env.save HTTP/1.1", host: "pgadmin4.sorotop.com.br"
...
show less
Port Scan
🇳🇱
e.fierstra
2026-08-28 14:33:33
(6 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-08-28 14:29:57
(6 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
4server
2026-08-28 12:41:11
(8 hours ago)
[FriAug2814:41:09.1042352026][security2:error][pid2646617:tid2646672][client34.80.29.251:0]ModSecuri ...
show more
[FriAug2814:41:09.1042352026][security2:error][pid2646617:tid2646672][client34.80.29.251:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"titrasloco.com\"][uri\"/.env.old\"][unique_id\"apGB5awXmHsYcey4TJrZogAAAFI\"]
show less
Port Scan
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-08-28 12:40:48
(8 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 10:20:32
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.29.251 (251.29.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.29.251 (251.29.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 06:20:25.399009 2026] [security2:error] [pid 22699:tid 22699] [client 34.80.29.251:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.dentguyvt.com"] [uri "/.env.backup"] [unique_id "apFg6VWecpsDawZWDnV1DwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
bazter.pro
2026-08-27 22:06:52
(22 hours ago)
Auto-Ban [2026-08-28 01:06:52]: CRITICAL: .env attack; DC: Google LLC [Paths: 19] | Details: Exploit ...
show more
Auto-Ban [2026-08-28 01:06:52]: CRITICAL: .env attack; DC: Google LLC [Paths: 19] | Details: Exploit trap paths: /.env.example, /.env.prod, /actuator/configprops, /.env.dev, /wp-config.php.bak | Sensitive files/paths: /.env.example, /.env.prod, /.env.dev, /wp-config.php.bak, /.env.backup | 404 errors (19): /storage/logs/laravel.log, /.env.example, /.env.backup, /.env.local, /crusader-404-probe, /.env.old, /wp-config.php~, /.env.save, /.env, /env (and 9 more)
show less
Web App Attack
Hacking
🇨🇭
SOC [GOLINE SA]
2026-08-27 22:04:50
(22 hours ago)
FortiGate detected IPS attack from IPv4 address 34.80.29.251
Hacking
🇺🇸
aks4226
2026-08-27 21:56:41
(23 hours ago)
Bot search, attacking common web applications.
Web App Attack
🇬🇧
PeravixGroup
2026-08-27 21:25:01
(23 hours ago)
Imunify360 WAF block (graylisted)
Web App Attack
🇺🇸
markawes
2026-08-27 20:25:52
(1 day ago)
[SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence:
34.80.29.251 ...
show more
[SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence:
34.80.29.251 - - [27/Aug/2026:20:25:51 +0000] "GET /.env HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
34.80.29.251 - - [27/Aug/2026:20:25:51 +0000] "GET /.env.dev HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
show less
Web App Attack
Port Scan
🇯🇵
Beonesoft
2026-08-27 20:05:47
(1 day ago)
SiteGuard: Log File Access blocked. Rule: url-log
Web App Attack
🇳🇱
ParaBug
2026-08-27 19:14:14
(1 day ago)
34.80.29.251 - - [27/Aug/2026:21:14:13 +0200] "GET /.env.dev HTTP/1.1" 301 4702 "-" "crusader-worker ...
show more
34.80.29.251 - - [27/Aug/2026:21:14:13 +0200] "GET /.env.dev HTTP/1.1" 301 4702 "-" "crusader-worker/1.0"
...
show less
Phishing
Brute-Force
Web App Attack