πΊπΈ
TPI-Abuse
2026-08-26 19:51:28
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.140.255.101 (101.255.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.255.101 (101.255.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 15:51:24.634359 2026] [security2:error] [pid 21887:tid 21887] [client 34.140.255.101:34756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rhkglobal.com"] [uri "/media../.env"] [unique_id "ao9DvIT8-6oZbuCOxf64HwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-26 19:26:27
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.140.255.101 (101.255.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.255.101 (101.255.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 15:26:23.732923 2026] [security2:error] [pid 16410:tid 16410] [client 34.140.255.101:52234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yeungshk.com"] [uri "/static../.env"] [unique_id "ao893_jUkzRnVv_noyfb6gAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¨π
4server
2026-08-26 18:42:09
(5 days ago)
[WedAug2620:42:03.8681082026][security2:error][pid1518333:tid1518362][client34.140.255.101:0]ModSecu ...
show more
[WedAug2620:42:03.8681082026][security2:error][pid1518333:tid1518362][client34.140.255.101:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"/etc/passwd\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"141\"][id\"347009\"][rev\"1\"][msg\"Atomicorp.comWAFRules:ProtectedFileaccessdenied\"][severity\"CRITICAL\"][hostname\"gipfelbild.com\"][uri\"/@fs/etc/passwd\"][unique_id\"ao8zeypwJB5z4-qD5JuVJgAAAQ0\"]
show less
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-26 18:24:32
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.140.255.101 (101.255.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.255.101 (101.255.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 14:24:26.837826 2026] [security2:error] [pid 11433:tid 11433] [client 34.140.255.101:2712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teamgravity.ca"] [uri "/media../.env"] [unique_id "ao8vWhK_RgseV9wVPnF8VwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-26 17:42:29
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.140.255.101 (101.255.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.255.101 (101.255.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 13:42:23.285812 2026] [security2:error] [pid 25035:tid 25035] [client 34.140.255.101:17114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artocratic.com"] [uri "/.git/HEAD"] [unique_id "ao8lf-AKwN0REM44Hrpz8gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
voemedia
2026-08-26 16:41:07
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.140.255.101 (BE/Belgium/101.255.140. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.140.255.101 (BE/Belgium/101.255.140.34.bc.googleusercontent.com)
show less
SQL Injection
π«π·
dynamix
2026-08-26 16:34:52
(5 days ago)
Multiple WAF Violations
Web App Attack
π§πͺ
madeit
2026-08-26 16:00:56
(5 days ago)
Web App Attack
πͺπΈ
alferez
2026-08-26 14:47:49
(5 days ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-26 13:59:52
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.140.255.101 (101.255.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.255.101 (101.255.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 09:59:47.741480 2026] [security2:error] [pid 18684:tid 18684] [client 34.140.255.101:10982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "answeringilliana.com"] [uri "/static../.env"] [unique_id "ao7xU4QdbHsmR-hssjE69AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Mangelot Hosting
2026-08-26 13:39:21
(5 days ago)
(modsecurity) srv101 ModSecurity 34.140.255.101 (BE/Belgium/101.255.140.34.bc.googleusercontent.com) ...
show more
(modsecurity) srv101 ModSecurity 34.140.255.101 (BE/Belgium/101.255.140.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
π«π·
Octopuce
2026-08-26 12:49:55
(6 days ago)
Aggressive web search of vulnerable pages: /media../.env /static../.env /.env.local /.env /api/.env ...
show more
Aggressive web search of vulnerable pages: /media../.env /static../.env /.env.local /.env /api/.env ...
show less
Web App Attack
π§πͺ
voormedia
2026-08-26 11:40:02
(6 days ago)
Accessed trap at '/actuator/env'
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-26 11:25:52
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.140.255.101 (101.255.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.255.101 (101.255.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 07:25:44.482614 2026] [security2:error] [pid 32555:tid 32555] [client 34.140.255.101:55984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ouguergouz.com"] [uri "/static../.env"] [unique_id "ao7NOHiMNtI3vkS5tQU6ZQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
masterguru
2026-08-26 11:01:34
(6 days ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack