๐บ๐ธ
TPI-Abuse
2026-09-22 17:08:42
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:08:35.753524 2026] [security2:error] [pid 26172:tid 26172] [client 34.92.145.116:50986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "simplyexquisitetravels.com"] [uri "/.env"] [unique_id "arK2E67HD0SX0VqHAwcswgAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-22 16:55:03
(1 month ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐บ๐ธ
Lee Daniel
2026-09-22 16:51:33
(1 month ago)
34.92.145.116 - - [22/Sep/2026:12:51:32 -0400] "GET /.env HTTP/1.1" 403 6295 "-" "crusader-worker/1. ...
show more
34.92.145.116 - - [22/Sep/2026:12:51:32 -0400] "GET /.env HTTP/1.1" 403 6295 "-" "crusader-worker/1.0"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 16:43:46
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:43:39.123534 2026] [security2:error] [pid 3227:tid 3227] [client 34.92.145.116:56170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rgnexcore.com"] [uri "/.env.dev"] [unique_id "arKwO5shXFacL_HWIs2MdAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 15:45:41
(1 month ago)
[da.kdns.gr] httpd-config-scan: sites=www.nutrijourney.gr; logs=/var/log/httpd/domains/nutrijourney. ...
show more
[da.kdns.gr] httpd-config-scan: sites=www.nutrijourney.gr; logs=/var/log/httpd/domains/nutrijourney.gr.log; samples=/.env | /.env.backup | /.env.local
show less
Hacking
Web App Attack
๐ฌ๐ง
consul.to
2026-09-22 15:23:52
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ท
Lunix
2026-09-22 15:18:58
(1 month ago)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 14:43:16
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:43:11.583020 2026] [security2:error] [pid 16890:tid 16890] [client 34.92.145.116:36820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magiccarpentry.com.citystreetsalon.com"] [uri "/.env.local"] [unique_id "arKT_3lh_cmIjTH29ANTcwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-09-22 14:19:20
(1 month ago)
[22/Sep/2026:17:19:20 +0300] -- 34.92.145.116 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env ...
show more
[22/Sep/2026:17:19:20 +0300] -- 34.92.145.116 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.dev HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Nop Nop
2026-09-22 13:35:21
(1 month ago)
CrowdSec ban: crowdsecurity/http-sensitive-files
Port Scan
๐บ๐ธ
TPI-Abuse
2026-09-22 13:18:54
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.145.116 (116.145.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:18:50.163767 2026] [security2:error] [pid 10531:tid 10531] [client 34.92.145.116:34016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furbabieslivesmatter.com"] [uri "/.env.local"] [unique_id "arKAOq-dqRqQMwncuGNNPwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-22 13:17:04
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ณ๐ฑ
debestelapp
2026-09-22 13:15:13
(1 month ago)
Web App Attack
๐ฟ๐ฆ
conure.sh
2026-09-22 13:14:42
(1 month ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s
Web App Attack
Anonymous
2026-09-22 13:07:07
(1 month ago)
Automated web scanner. Requested suspicious paths: /.env.save | /.env.old | /actuator/configprops | ...
show more
Automated web scanner. Requested suspicious paths: /.env.save | /.env.old | /actuator/configprops | /crusader-404-probe | /.env.local | /.env.dev | /.env.bak | /.env.production | /_ignition/health-check | /.env | /.env.backup | /storage/logs/laravel.log | /actuator/env | /.env.prod | /env | /.env.example. UTC: 2026-09-22 12:42:31.
show less
Web App Attack