๐บ๐ธ
TPI-Abuse
2026-09-21 05:03:43
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 01:03:37.707424 2026] [security2:error] [pid 23826:tid 23826] [client 34.24.176.107:55006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daydar.net"] [uri "/.env.local"] [unique_id "arC6qQu1NmwJ4USX--rDjQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 04:17:02
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 00:16:57.527488 2026] [security2:error] [pid 22876:tid 22876] [client 34.24.176.107:55854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ardath.net"] [uri "/api/.env"] [unique_id "arCvuSbm_oBsSXQ2Xv7O6QAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Omega Threat-ID
2026-09-21 04:01:05
(5 days ago)
Omega Point Threat ID honeypot sensor observed: abuse-reported
Port Scan
๐บ๐ธ
TPI-Abuse
2026-09-21 03:54:33
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 23:54:28.378324 2026] [security2:error] [pid 14170:tid 14170] [client 34.24.176.107:54836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.christineohlman.net"] [uri "/.git/HEAD"] [unique_id "arCqdGYTruA5B_tp964DwQAAADw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-09-21 03:05:32
(5 days ago)
Too many Status 40X (11)
Scanning/Probing (24)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 03:04:05
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 23:03:57.913409 2026] [security2:error] [pid 31666:tid 31666] [client 34.24.176.107:33224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.flugstadcom.xn--lyngr-yua.net"] [uri "/backend/.env"] [unique_id "arCena2UTi_Rq8gauSnnvgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 02:46:07
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 22:46:04.351345 2026] [security2:error] [pid 20030:tid 20030] [client 34.24.176.107:59726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.hisfavorite.net"] [uri "/.git/HEAD"] [unique_id "arCabHlzjFUiwkSM9d_iSQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-09-21 02:18:27
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
๐จ๐ญ
4server
2026-09-21 02:00:11
(5 days ago)
[MonSep2104:00:08.5574112026][security2:error][pid1274094:tid1274475][client34.24.176.107:0]ModSecur ...
show more
[MonSep2104:00:08.5574112026][security2:error][pid1274094:tid1274475][client34.24.176.107:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"webmail.hostingedominio.net\"][uri\"/@fs/..%2f..%2f..%2f..%2f..%2froot/.env\"][unique_id\"arCPqCw0-QIF8cdBg8yfXgAAAAE\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 01:33:12
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 21:33:04.850984 2026] [security2:error] [pid 1686:tid 1686] [client 34.24.176.107:57672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.houseofbates.net"] [uri "/services/.env"] [unique_id "arCJUBVGEdsBy1WAi-TJjAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-21 01:00:11
(5 days ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-09-21 00:52:11
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 20:52:05.416580 2026] [security2:error] [pid 31292:tid 31292] [client 34.24.176.107:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "earscript.net"] [uri "/.env.backup"] [unique_id "arB_tfLEzreQ7SPRG3ljhwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
konseptit
2026-09-21 00:18:33
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.24.176.107 (US/United States/107.176 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.24.176.107 (US/United States/107.176.24.34.bc.googleusercontent.com)
show less
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-09-20 23:15:59
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.176.107 (107.176.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 19:15:56.448097 2026] [security2:error] [pid 19800:tid 19800] [client 34.24.176.107:46168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "churchlets.net"] [uri "/.env.bak"] [unique_id "arBpLERP60TZdQv79ppJuwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
paissangroup
2026-09-20 22:58:17
(5 days ago)
Multiple WAF Violations
Web App Attack