🇺🇸
TPI-Abuse
2026-09-22 01:46:40
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 21:46:36.910771 2026] [security2:error] [pid 13862:tid 13862] [client 34.21.180.169:54714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.marat.info"] [uri "/@fs/app/.env"] [unique_id "arHd_LHnZ7ip1_ijOV1imgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 00:43:35
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 20:43:31.333804 2026] [security2:error] [pid 26116:tid 26116] [client 34.21.180.169:33518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.missyshinoski.info"] [uri "/api/v1/.env"] [unique_id "arHPM8ywNE9txkGWhxh8UgAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 23:18:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:18:53.223078 2026] [security2:error] [pid 24239:tid 24239] [client 34.21.180.169:36398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.encoreporchfest.info"] [uri "/.env"] [unique_id "arG7XWyoVfACpI5R6Ps3fQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-21 22:10:54
(1 day ago)
124 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
🇮🇹
VHosting
2026-09-21 21:35:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-09-21 21:28:39
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
SCHAPPY
2026-09-21 21:19:40
(1 day ago)
Bad bot identified by user agent
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-21 21:17:03
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 17:16:59.378249 2026] [security2:error] [pid 16051:tid 16051] [client 34.21.180.169:53458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howwegothere.info"] [uri "/.git/config"] [unique_id "arGey_Qgp4r7UK9J-ePpowAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 20:27:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 16:26:58.782199 2026] [security2:error] [pid 685562:tid 685562] [client 34.21.180.169:33806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cypraea.info"] [uri "/.git/HEAD"] [unique_id "arGTEiz5R_0htsBnDvbB4AAAAGw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 19:45:31
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 15:45:23.684251 2026] [security2:error] [pid 2119:tid 2119] [client 34.21.180.169:47704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "braunfamily.info"] [uri "/project/.env"] [unique_id "arGJUzXEVXUsLxT1_E2qnAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-21 19:43:40
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇩🇪
Gwyneth Llewelyn
2026-09-21 19:37:15
(1 day ago)
2026/09/21 20:37:13 [error] 325888#325888: *1111080 access forbidden by rule, client: 34.21.180.169, ...
show more
2026/09/21 20:37:13 [error] 325888#325888: *1111080 access forbidden by rule, client: 34.21.180.169, server: [redacted], request: "GET /api/.env HTTP/2.0", host: "web.betatechnologies.info"
2026/09/21 20:37:13 [error] 325888#325888: *1111080 access forbidden by rule, client: 34.21.180.169, server: [redacted], request: "GET /admin/.env HTTP/2.0", host: "web.betatechnologies.info"
2026/09/21 20:37:13 [error] 325888#325888: *1111080 access forbidden by rule, client: 34.21.180.169, server: [redacted], request: "GET /bot/.env HTTP/2.0", host: "web.betatechnologies.info"
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 19:24:29
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.180.169 (169.180.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 15:24:22.388838 2026] [security2:error] [pid 8048:tid 8048] [client 34.21.180.169:54868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.khodel.info"] [uri "/.git/HEAD"] [unique_id "arGEZtjSwCorjc13ZnhX8gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-21 19:09:34
(1 day ago)
Excessive 404/403 errors
Brute-Force
🇩🇪
gurnip
2026-09-21 19:08:32
(1 day ago)
Vulnerability probe of page /.env.local, not found on the server.
Brute-Force
Web App Attack
