🇺🇸
TPI-Abuse
2026-09-08 12:25:30
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 08:25:25.096123 2026] [security2:error] [pid 5849:tid 5849] [client 34.16.150.166:46378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lusocleaningservice.com"] [uri "/@fs/src/.env"] [unique_id "ap_-tQy_MlbyxN_aIaXS2AAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 11:57:14
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 07:57:07.284934 2026] [security2:error] [pid 11751:tid 11751] [client 34.16.150.166:19176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.watongalodging.com"] [uri "/@fs/root/.env"] [unique_id "ap_4EwgtGcdGZKmuTmSUawAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-08 11:34:30
(10 hours ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 11:17:33
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 07:17:27.633786 2026] [security2:error] [pid 19098:tid 19098] [client 34.16.150.166:17962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thinkerblox.com"] [uri "/@fs/root/.env"] [unique_id "ap_ux4xNEAPALMxwxq-ZGgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 10:54:56
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 06:54:49.039192 2026] [security2:error] [pid 3476:tid 3476] [client 34.16.150.166:29142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "go.maggiemusic.ca"] [uri "/@fs/src/.env"] [unique_id "ap_peZ4SQmo3DfQTKVJW2QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Eldeberen
2026-09-08 10:06:59
(11 hours ago)
Vulnerability scan attempt through HTTP protocol
Web App Attack
🇬🇧
consul.to
2026-09-08 10:05:08
(11 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇷
Halux
2026-09-08 09:58:25
(11 hours ago)
34.16.150.166 Probing protected path or service
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 09:52:11
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 05:52:05.646335 2026] [security2:error] [pid 22509:tid 22509] [client 34.16.150.166:7370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carboncreekwood.com"] [uri "/@fs/root/.env"] [unique_id "ap_axWooko4uEME5tWcypgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-08 09:33:38
(12 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 09:05:06
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 05:04:56.144217 2026] [security2:error] [pid 30949:tid 30949] [client 34.16.150.166:6440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.thegrabbagshow.com"] [uri "/@fs/app/.env"] [unique_id "ap_PuKeOuAV0AnDt-n_KcQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-08 08:35:33
(13 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
mnsf
2026-09-08 08:05:53
(13 hours ago)
Scanning/Probing (25)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 08:05:18
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.150.166 (166.150.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 04:05:14.012377 2026] [security2:error] [pid 4288:tid 4324] [client 34.16.150.166:12138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ultimate-billiards.com"] [uri "/@fs/.env.staging"] [unique_id "ap_Bupz1W0EP-vC0Ow2hfgAAAYY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-08 07:29:54
(14 hours ago)
[Tue Sep 08 17:29:53.506861 2026] [security2:error] [pid 218629] [client 34.16.150.166:25432] [clien ...
show more
[Tue Sep 08 17:29:53.506861 2026] [security2:error] [pid 218629] [client 34.16.150.166:25432] [client 34.16.150.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/@fs/app/.env"] [unique_id "ap-5cSizLiquplpFnzPO1QAAAAY"], referer: https://www.paulshipley.info/@fs/app/.env?raw??
...
show less
Web App Attack