๐ฉ๐ช
big-cloud.nl
2026-08-26 01:20:28
(2 hours ago)
Try to access /.env
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 00:43:49
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 20:43:42.137640 2026] [security2:error] [pid 16211:tid 16211] [client 34.171.140.124:21420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psystems.net"] [uri "/.env"] [unique_id "ao42vncLVjKu8IDJ5_q0OwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-26 00:18:19
(3 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 23:28:42
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 19:28:34.447362 2026] [security2:error] [pid 14379:tid 14379] [client 34.171.140.124:56204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psychiatryabuse.com"] [uri "/.env"] [unique_id "ao4lIlvyXR6ouRph2w47HQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-08-25 23:06:02
(4 hours ago)
Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [ice01]
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
mnsf
2026-08-25 23:05:18
(5 hours ago)
Abuse Detected (9)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 22:49:04
(5 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:949110) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 18:48:58.443053 2026] [security2:error] [pid 2628:tid 2628] [client 34.171.140.124:58698] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "psqeng.com"] [uri "/.env"] [unique_id "ao4b2rLTMlbWqWgNL2_FMAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-08-25 22:08:00
(5 hours ago)
Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [ice02,mx02,wa01,wa02]
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 20:59:27
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 16:59:21.402779 2026] [security2:error] [pid 32118:tid 32118] [client 34.171.140.124:2970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pscc.com"] [uri "/.env"] [unique_id "ao4CKQDO7-vTMd2f_VS1DgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 20:40:40
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 16:40:32.421419 2026] [security2:error] [pid 31653:tid 31653] [client 34.171.140.124:22500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ps-omega.com"] [uri "/.env"] [unique_id "ao39wLv8njVLtCQ8SsWsTwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Stara
2026-08-25 19:55:22
(8 hours ago)
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ...
show more
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja)
show less
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
4server
2026-08-25 19:48:15
(8 hours ago)
[TueAug2521:48:10.1414252026][security2:error][pid2921933:tid2922049][client34.171.140.124:0]ModSecu ...
show more
[TueAug2521:48:10.1414252026][security2:error][pid2921933:tid2922049][client34.171.140.124:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"prstartup.ch\"][uri\"/.git/config\"][unique_id\"ao3xejPVt-rR-Ee7WmW32gAAAFU\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 19:23:19
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 15:23:12.479852 2026] [security2:error] [pid 11805:tid 11805] [client 34.171.140.124:52506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proyectando.com"] [uri "/.env"] [unique_id "ao3roL2bHTEI_iSSsbgmUAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
gadix
2026-08-25 19:02:06
(9 hours ago)
[25/Aug/2026:21:01:58.837478 +0200] ao3mpsF9zKGik2YihrjoLQAAAAY 34.171.140.124 55976 127.0.0.1 7081
...
show more
[25/Aug/2026:21:01:58.837478 +0200] ao3mpsF9zKGik2YihrjoLQAAAAY 34.171.140.124 55976 127.0.0.1 7081
[25/Aug/2026:21:01:59.196120 +0200] ao3mp7rycZYNh502Kq6CFwAAAAw 34.171.140.124 55986 127.0.0.1 7081
[25/Aug/2026:21:02:00.714779 +0200] ao3mqFtY_NxrY860fBU1qQAAAAo 34.171.140.124 56008 127.0.0.1 7081
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 18:21:21
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.171.140.124 (124.140.171.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 14:21:13.673556 2026] [security2:error] [pid 14797:tid 14797] [client 34.171.140.124:25268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yacht-register-san-marino.com"] [uri "/.git/config"] [unique_id "ao3dGXLqv4jd5EugxOWTaAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack