🇺🇸
TPI-Abuse
2026-09-23 12:45:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.159.127.226 (226.127.159.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.127.226 (226.127.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 08:45:31.629775 2026] [security2:error] [pid 4986:tid 4986] [client 34.159.127.226:40430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.beckerbrokerage.net"] [uri "/.htpasswd"] [unique_id "arPJ6_WsrKTPH-j3I1xlEwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-23 12:26:33
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.159.127.226 (226.127.159.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.127.226 (226.127.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 08:26:28.332035 2026] [security2:error] [pid 13038:tid 13038] [client 34.159.127.226:55902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.afjm.net"] [uri "/_nuxt/../.env"] [unique_id "arPFdMEPrIfRRSY3LD7i8wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-23 12:03:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.159.127.226 (226.127.159.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.127.226 (226.127.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 08:03:06.819549 2026] [security2:error] [pid 18012:tid 18012] [client 34.159.127.226:55300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.belgiophar.net"] [uri "/.env.development"] [unique_id "arO_-hOVMdbdqi63ndmmHAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
monn45888
2026-09-23 11:49:04
(1 day ago)
$f2bV_matches
Web App Attack
🇬🇧
abivia
2026-09-23 11:47:53
(1 day ago)
Abivia WAF trigger: Rule scriptKiddies: Credential probing uri: /assets/manifest.json
Hacking
🇺🇸
TPI-Abuse
2026-09-23 11:46:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.159.127.226 (226.127.159.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.127.226 (226.127.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 07:46:15.669851 2026] [security2:error] [pid 22847:tid 22847] [client 34.159.127.226:54028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adultshop61.net"] [uri "/.env"] [unique_id "arO8B_PwNhIFa3j7Ifld2gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-23 11:45:47
(1 day ago)
Multiple WAF Violations
Web App Attack
🇨🇦
Mediashaker
2026-09-23 11:41:27
(1 day ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.159.127.226 (DE/G ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.159.127.226 (DE/Germany/226.127.159.34.bc.googleusercontent.com)
show less
Bad Web Bot
2026-09-23 11:41:27
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇮🇹
VHosting
2026-09-23 11:40:09
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-23 11:31:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.159.127.226 (226.127.159.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.127.226 (226.127.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 07:31:17.171569 2026] [security2:error] [pid 914:tid 914] [client 34.159.127.226:36160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "batw.net"] [uri "/web.config"] [unique_id "arO4hdASSPQMlNzAJzk15wAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack