๐บ๐ธ
TPI-Abuse
2026-09-22 00:44:53
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:949110) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 20:44:45.534127 2026] [security2:error] [pid 2087:tid 2087] [client 34.30.192.14:49552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wb-tn.trophiesetc.us"] [uri "/.git/HEAD"] [unique_id "arHPfS_QSPjtfXoAfaRflAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 23:38:27
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:38:23.807732 2026] [security2:error] [pid 19793:tid 19793] [client 34.30.192.14:45564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hoofprints.us"] [uri "/.git/config"] [unique_id "arG_71V66B5DADdm3hwedgAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 22:07:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 18:07:51.724736 2026] [security2:error] [pid 12665:tid 12665] [client 34.30.192.14:41368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greenlight.us"] [uri "/.env.js"] [unique_id "arGqt5pV2140CMDcii_IPgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 21:45:58
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 17:45:50.830976 2026] [security2:error] [pid 1769:tid 1769] [client 34.30.192.14:45698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kirt.us"] [uri "/.env.production"] [unique_id "arGljlEOGqj3eYqdkZD9bgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 18:03:24
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:03:19.649578 2026] [security2:error] [pid 31241:tid 31241] [client 34.30.192.14:37026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.understory.us"] [uri "/.git/config"] [unique_id "arFxZ3RnVVfI4RjMGeOlSQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
SketchyDude
2026-09-21 17:25:24
(1 week ago)
Banned by Fail2Ban jail: apache-fakegooglebot
Bad Web Bot
๐บ๐ธ
mnsf
2026-09-21 17:05:45
(1 week ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 16:44:33
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 12:44:28.733728 2026] [security2:error] [pid 22571:tid 22571] [client 34.30.192.14:59888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.naturallyneworleans.anthonyjoseph.us"] [uri "/.env.js"] [unique_id "arFe7Jtl3cFH6p0tgrUSPQAAAFs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 15:06:11
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 11:06:07.398990 2026] [security2:error] [pid 30224:tid 30224] [client 34.30.192.14:56458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.penjoki.us"] [uri "/@fs/app/.env"] [unique_id "arFH34JCsG4S86LgW2GZ3gAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-09-21 14:31:25
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 14:30:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 10:30:50.092429 2026] [security2:error] [pid 26041:tid 26121] [client 34.30.192.14:41466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newyorkplasticsurgery.us"] [uri "/.git/config"] [unique_id "arE_mgNobfAAYctDIU_0swAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 14:13:26
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 10:13:22.468267 2026] [security2:error] [pid 6803:tid 6803] [client 34.30.192.14:60122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.artaria.us"] [uri "/.env_1"] [unique_id "arE7gtkhqAbRlssyN5v9hAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 13:47:36
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 09:47:29.489669 2026] [security2:error] [pid 4162:tid 4162] [client 34.30.192.14:39882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gbaker.us"] [uri "/internal/.env"] [unique_id "arE1cXFZ51SDbMCMqf1newAAAFE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 13:29:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.192.14 (14.192.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 09:29:13.536094 2026] [security2:error] [pid 1012:tid 1012] [client 34.30.192.14:50390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.cdphotography.us"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "arExKWiJ3HTHPrnFgLLC6QAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-21 13:04:01
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack