๐ฉ๐ช
4server
2026-09-19 07:39:02
(1 month ago)
[2026-09-1909:38:57 0200]info[cpaneld]34.80.12.151--\"GET/healthHTTP/1.1\"FAILEDLOGINcpaneld:loginattemptwithoutusername[2026-09-1909:38:57 0200]info[cpaneld]34.80.12.151--\"GET/.env.liveHTTP/1.1\"FAILEDLOGINcpaneld:loginattemptwithoutusername[2026-0 ...
show more
[2026-09-1909:38:57 0200]info[cpaneld]34.80.12.151--\"GET/healthHTTP/1.1\"FAILEDLOGINcpaneld:loginattemptwithoutusername[2026-09-1909:38:57 0200]info[cpaneld]34.80.12.151--\"GET/.env.liveHTTP/1.1\"FAILEDLOGINcpaneld:loginattemptwithoutusername[2026-09-1909:38:58 0200]info[cpaneld]34.80.12.151--\"GET/api/v1/.envHTTP/1.1\"FAILEDLOGINcpaneld:loginattemptwithoutusername[2026-09-1909:38:58 0200]info[cpaneld]34.80.12.151--\"GET/.env.prodHTTP/1.1\"FAILEDLOGINcpaneld:loginattemptwithoutusername[2026-09-1909:38:58 0200]info[cpaneld]34.80.12.151--\"GET/api/v2/configHTTP/1.1\"FAILEDLOGINcpaneld:loginattemptwithoutusername
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-19 07:00:19
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.80.12.151 (151.12.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 03:00:09.273421 2026] [security2:error] [pid 12314:tid 12 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.12.151 (151.12.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 03:00:09.273421 2026] [security2:error] [pid 12314:tid 12314] [client 34.80.12.151:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.marshallcurry.com"] [uri "/admin/.env"] [unique_id "aq4y-Qd-SduDGLTZGHkEtgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-19 06:36:23
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.80.12.151 (151.12.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 02:36:17.265457 2026] [security2:error] [pid 5427:tid 542 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.12.151 (151.12.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 02:36:17.265457 2026] [security2:error] [pid 5427:tid 5427] [client 34.80.12.151:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.local639.com"] [uri "/@fs/src/.env"] [unique_id "aq4tYTSo_ELS0YTUa5kJtAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-19 05:15:53
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.80.12.151 (151.12.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 01:15:49.267082 2026] [security2:error] [pid 32532:tid 32 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.12.151 (151.12.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 01:15:49.267082 2026] [security2:error] [pid 32532:tid 32532] [client 34.80.12.151:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.infinitewashing.com"] [uri "/@fs/app/.env"] [unique_id "aq4aha6B52xFIvQWq5FBvQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-19 04:55:46
(1 month ago)
Blocked by ModSec and CSF
Port Scan
๐บ๐ธ
TPI-Abuse
2026-09-19 04:47:29
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.80.12.151 (151.12.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 00:47:25.999130 2026] [security2:error] [pid 9512:tid 951 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.12.151 (151.12.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 00:47:25.999130 2026] [security2:error] [pid 9512:tid 9512] [client 34.80.12.151:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.hollyranch.com"] [uri "/@fs/app/.env"] [unique_id "aq4T3Vn69X8At6Co1R8EJgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐พ
Rizzy
2026-09-19 04:17:50
(1 month ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฎ๐น
VHosting
2026-09-19 04:15:03
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ช๐ธ
masterguru
2026-09-19 04:14:22
(1 month ago)
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000-122)
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-19 04:09:10
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.80.12.151 (151.12.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 00:09:05.962646 2026] [security2:error] [pid 17041:tid 17 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.12.151 (151.12.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 00:09:05.962646 2026] [security2:error] [pid 17041:tid 17041] [client 34.80.12.151:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.globetechsecurities.com"] [uri "/.htpasswd"] [unique_id "aq4K4XqVkBZkYUbSwR0zxAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-18 19:18:30
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.80.12.151 (151.12.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 15:18:23.614788 2026] [security2:error] [pid 8308:tid 830 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.12.151 (151.12.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 15:18:23.614788 2026] [security2:error] [pid 8308:tid 8308] [client 34.80.12.151:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||backend.grainavi.com|F|2"] [data ".grainavi.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "backend.grainavi.com"] [uri "/z9x8c7v6b5-debug-trigger-backend.grainavi.com"] [unique_id "aq2OfxwW7C1ZWd31a4pqNwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
rsa
2026-09-18 16:21:00
(1 month ago)
GET /files../.env HTTP/1.1
DDoS Attack
Exploited Host
Web App Attack
๐จ๐ฆ
polycoda
2026-09-18 11:51:38
(1 month ago)
AutoBlock: ๐ก Port Scan (Non Decay-Based) - โ Excessive 40X Errors (Decay-Based)
Port Scan
Bad Web Bot
Anonymous
2026-09-18 04:09:29
(1 month ago)
Suspicious URL access.
Hacking
๐ช๐ธ
robotstxt
2026-09-18 02:30:40
(1 month ago)
34.80.12.151 - - [18/Sep/2026:02:30:38 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.80.12.151"
34.80.12.151 - - [18/Sep/2026:02:30:38 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.80.12.151"
34.80.12.151 - - [18/Sep ...
show more
34.80.12.151 - - [18/Sep/2026:02:30:38 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.80.12.151"
34.80.12.151 - - [18/Sep/2026:02:30:38 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.80.12.151"
34.80.12.151 - - [18/Sep/2026:02:30:38 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.80.12.151"
...
show less
Web Spam
Web App Attack