🇺🇸
TPI-Abuse
2026-09-04 15:16:13
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:16:05.712250 2026] [security2:error] [pid 8299:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:16:05.712250 2026] [security2:error] [pid 8299:tid 8412] [client 34.151.246.249:45570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jd-mason.com"] [uri "/wp-config.php~"] [unique_id "aprgtdAyp08f1StTk2bt3AAAARY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
AutosOnShow
2026-09-04 15:07:05
UTC ·
(2 months ago)
blocked for webapp attack | path requested: / | seen at 2026-09-04 15:06:22.680 |
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 14:49:04
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:49:00.389802 2026] [security2:error] [pid 24798:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:49:00.389802 2026] [security2:error] [pid 24798:tid 24798] [client 34.151.246.249:46148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chapa.net"] [uri "/.env.dev"] [unique_id "apraXKWgQvgkh9r5o_mhGQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
sdos.es
2026-09-04 14:40:11
UTC ·
(2 months ago)
"URL file extension is restricted by policy - .swp"
Web App Attack
🇲🇾
Rizzy
2026-09-04 14:21:54
UTC ·
(2 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 14:05:50
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:05:46.075089 2026] [security2:error] [pid 25028:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:05:46.075089 2026] [security2:error] [pid 25028:tid 25028] [client 34.151.246.249:36020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jinglybits.com"] [uri "/.env.example"] [unique_id "aprQOl9wOSzPxIWbTZD6pQAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-09-04 12:33:56
UTC ·
(2 months ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 11:46:00
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:45:56.260832 2026] [security2:error] [pid 3177:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:45:56.260832 2026] [security2:error] [pid 3177:tid 3177] [client 34.151.246.249:48828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.rimworld.com"] [uri "/.env.bak"] [unique_id "apqvdPDbccEykwXQAnNCygAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-04 10:40:58
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 10:02:55
UTC ·
(2 months ago)
(mod_security) mod_security (id:949110) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:02:50.164143 2026] [security2:error] [pid 30366:ti ...
show more
(mod_security) mod_security (id:949110) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:02:50.164143 2026] [security2:error] [pid 30366:tid 30366] [client 34.151.246.249:37442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.maricotippett.com"] [uri "/.env"] [unique_id "apqXSpQz9iFYZBQwVfSSWQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
raph
2026-09-04 09:09:10
UTC ·
(2 months ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 09:08:42
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:08:38.449658 2026] [security2:error] [pid 23105:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:08:38.449658 2026] [security2:error] [pid 23105:tid 23105] [client 34.151.246.249:58570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "levijoneslegal.com"] [uri "/.env.save"] [unique_id "apqKlppZFmus9K2o25ZmBAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-04 09:05:53
UTC ·
(2 months ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 08:25:40
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 04:25:34.359196 2026] [security2:error] [pid 25846:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.246.249 (249.246.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 04:25:34.359196 2026] [security2:error] [pid 25846:tid 25846] [client 34.151.246.249:44700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.boat-registration-france.com"] [uri "/.env.backup"] [unique_id "apqAfkrN67TS4SXmn6faWwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-04 08:06:01
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack