🇺🇸
TPI-Abuse
2026-09-01 13:58:21
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.56.243.62 (62.243.56.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.56.243.62 (62.243.56.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:58:17.461305 2026] [security2:error] [pid 26868:tid 26868] [client 34.56.243.62:50866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.homeschoolwv.com"] [uri "/.env.local"] [unique_id "apbZ-XyA-xNNFa5jpkLcSAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-01 13:10:22
(2 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 11:07:12
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.56.243.62 (62.243.56.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.56.243.62 (62.243.56.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:07:05.936448 2026] [security2:error] [pid 19221:tid 19221] [client 34.56.243.62:35916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.gfsprod.com"] [uri "/.env.production"] [unique_id "apax2b0SxaaLSUZv1smGHAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-01 10:20:09
(5 hours ago)
| Suspicious URL access.
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-09-01 09:14:53
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.56.243.62 (62.243.56.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.56.243.62 (62.243.56.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:14:45.847779 2026] [security2:error] [pid 226455:tid 226566] [client 34.56.243.62:45696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebiglies.org"] [uri "/wp-config.php.swp"] [unique_id "apaXhbAlSH7yQ6QV7T0hPwAAANY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-01 08:33:29
(7 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
FD-IX
2026-09-01 08:32:20
(7 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-01 08:05:36
(7 hours ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-09-01 07:52:28
(7 hours ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.56.243.62 (US/United States/62.243 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.56.243.62 (US/United States/62.243.56.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
kosada.com
2026-09-01 07:21:59
(8 hours ago)
Repeated requests for suspicious nonexistent URLs, for example: /.env.backup (bogus vhost/SNI) (HTTP ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /.env.backup (bogus vhost/SNI) (HTTP port 443)
show less
Web App Attack
🇩🇪
big-cloud.nl
2026-09-01 07:06:25
(8 hours ago)
Try to access /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 06:38:51
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.56.243.62 (62.243.56.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.56.243.62 (62.243.56.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:38:47.389667 2026] [security2:error] [pid 23530:tid 23530] [client 34.56.243.62:37050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "terrageosynthetics.com"] [uri "/.env.dev"] [unique_id "apZy94kiT_qCLiPrmQ9ZnQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-01 06:11:31
(9 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.56.243.62 (US/United States/62.243.56.34.bc. ...
show more
(mod_security) mod_security (id:949110) triggered by 34.56.243.62 (US/United States/62.243.56.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 06:05:40
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.56.243.62 (62.243.56.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.56.243.62 (62.243.56.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:05:33.564384 2026] [security2:error] [pid 11329:tid 11329] [client 34.56.243.62:36396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.peregrineproject.com"] [uri "/.env"] [unique_id "apZrLXXUMO6OgdTDVmJ75QAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-01 04:15:56
(11 hours ago)
Multiple WAF Violations
Web App Attack