๐บ๐ธ
TPI-Abuse
2026-09-01 13:50:50
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:50:44.945101 2026] [security2:error] [pid 28963:tid 28963] [client 34.153.157.68:45330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.drowninglovers.com"] [uri "/.env.old"] [unique_id "apbYNEV4iB2197mIdhILvQAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 13:09:09
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:09:05.180760 2026] [security2:error] [pid 11192:tid 11192] [client 34.153.157.68:39194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leadinglogan.com"] [uri "/.env.save"] [unique_id "apbOcToLhCIoPwWpGwbf1gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 12:32:52
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:32:45.672332 2026] [security2:error] [pid 29323:tid 29578] [client 34.153.157.68:35350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedinternalauditor.org.aafm.us"] [uri "/wp-config.php~"] [unique_id "apbF7YL9jUd1Jc6zHxsgWgAAAMs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
gadix
2026-09-01 11:01:34
(9 hours ago)
[01/Sep/2026:13:01:34.162798 +0200] apawjtNV9h206aU8rzY7nQAAABQ 34.153.157.68 47672 127.0.0.1 7081
[ ...
show more
[01/Sep/2026:13:01:34.162798 +0200] apawjtNV9h206aU8rzY7nQAAABQ 34.153.157.68 47672 127.0.0.1 7081
[01/Sep/2026:13:01:34.168184 +0200] apawjowvyHtEE1Gtn9leUwAAAAc 34.153.157.68 47686 127.0.0.1 7081
[01/Sep/2026:13:01:34.173220 +0200] apawjvC5bkfjIApRlNK0LAAAAAY 34.153.157.68 47698 127.0.0.1 7081
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 11:01:24
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:01:16.710024 2026] [security2:error] [pid 21388:tid 21388] [client 34.153.157.68:53788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.rodandreelpiercam.com"] [uri "/.env.dev"] [unique_id "apawfHrB0IVCGuElTawSnQAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 09:31:23
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:31:17.032342 2026] [security2:error] [pid 4817:tid 4817] [client 34.153.157.68:48574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southsideaccountingservices.com"] [uri "/.env.dev"] [unique_id "apabZd54X6zsE9a4blgDbQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
zynex
2026-09-01 08:30:25
(12 hours ago)
URL Probing: /.env
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 07:07:05
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:06:56.960412 2026] [security2:error] [pid 16652:tid 16652] [client 34.153.157.68:49076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mms-boss.net"] [uri "/.env.old"] [unique_id "apZ5kOgSOqKtRobu8Tzz2AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-09-01 07:05:37
(13 hours ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 06:49:09
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:49:04.612444 2026] [security2:error] [pid 19333:tid 19333] [client 34.153.157.68:50090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "time.ggisoft.com"] [uri "/.env.prod"] [unique_id "apZ1YCxTEbVa1FfzMfKj1gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 06:21:53
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:21:45.253104 2026] [security2:error] [pid 6336:tid 6336] [client 34.153.157.68:34496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.adrienberthaud.com"] [uri "/.env.production"] [unique_id "apZu-XZQ3HWVgTlcFzr19wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FD-IX
2026-09-01 06:09:19
(14 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ญ๐บ
miszterx.hu
2026-09-01 05:38:54
(15 hours ago)
XORP (haproxy): 3x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ipt ...
show more
XORP (haproxy): 3x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
Anonymous
2026-09-01 05:12:53
(15 hours ago)
GET /.env.bak HTTP/1.1
...
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 05:07:25
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.157.68 (68.157.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:07:21.433338 2026] [security2:error] [pid 26293:tid 26293] [client 34.153.157.68:54434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.instagenii.com"] [uri "/.env.example"] [unique_id "apZdibc5l0HXX1SG4HTEnQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack