🇺🇸
TPI-Abuse
2026-09-07 20:40:40
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 16:40:36.412804 2026] [security2:error] [pid 32043:tid 32043] [client 34.11.109.98:54390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sinobit.org"] [uri "/@fs/root/.env"] [unique_id "ap8hRLCJr3qCF9m0zrG0hAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-07 20:25:03
(2 hours ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 19:47:11
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:47:06.825673 2026] [security2:error] [pid 29724:tid 29724] [client 34.11.109.98:6504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trimandtend.com"] [uri "/@fs/.env"] [unique_id "ap8Uuv49jzcb2tcD_lksoAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-07 19:40:32
(3 hours ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 19:18:46
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:18:42.768997 2026] [security2:error] [pid 31596:tid 31596] [client 34.11.109.98:14550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.lovechicks.com"] [uri "/@fs/.env.production"] [unique_id "ap8OEvHl6KqAXjCXHaSDfQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-09-07 19:01:39
(4 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.11.109.98 (US/Uni ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.11.109.98 (US/United States/98.109.11.34.bc.googleusercontent.com)
show less
Bad Web Bot
🇫🇷
Octopuce
2026-09-07 18:57:34
(4 hours ago)
Aggressive web search of vulnerable pages: /v2/.env /.docker/.env /images../.env /assets../.env /_nu ...
show more
Aggressive web search of vulnerable pages: /v2/.env /.docker/.env /images../.env /assets../.env /_nuxt/../.env ...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 18:56:06
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 14:56:03.244763 2026] [security2:error] [pid 15500:tid 15500] [client 34.11.109.98:38688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.minietonrailroad.org"] [uri "/@fs/../../.env"] [unique_id "ap8Iw8fY3lXPvqQk3zxp-gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
COMAITE
2026-09-07 18:35:11
(4 hours ago)
Suspicious URL access.
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 18:23:14
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 14:23:09.612648 2026] [security2:error] [pid 16726:tid 16726] [client 34.11.109.98:26612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lauranixon.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252froot/.env"] [unique_id "ap8BDQcxlkpnMSiN7DU46wAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-07 17:32:51
(5 hours ago)
1.933 requests with url.path */@fs/*
531 requests with url.path *.aws/*
406 requests with url.pat ...
show more
1.933 requests with url.path */@fs/*
531 requests with url.path *.aws/*
406 requests with url.path *.azure/*
334 requests with url.path *config.json
330 requests with url.path *credentials.json
219 requests with url.path *.config/*
145 requests with url.path */proc/*
138 requests with url.path *.ssh/*
show less
Brute-Force
Bad Web Bot
🇬🇧
consul.to
2026-09-07 17:23:58
(5 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 17:17:24
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 13:17:15.886155 2026] [security2:error] [pid 2146849:tid 2146849] [client 34.11.109.98:24708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jhonbens.com"] [uri "/@fs/.env"] [unique_id "ap7xm_kxFg3pIRo03LjNYQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 16:47:27
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 12:47:23.422549 2026] [security2:error] [pid 32337:tid 32337] [client 34.11.109.98:13542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.rotorservice.com"] [uri "/@fs/.env.development"] [unique_id "ap7qm_SUyA5sD8dMK0WlrgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 16:04:54
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.109.98 (98.109.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 12:04:50.679235 2026] [security2:error] [pid 5088:tid 5088] [client 34.11.109.98:48518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ronniescedarinn.com"] [uri "/@fs/.env.local"] [unique_id "ap7goq1onkjALuL6GB04vwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack