🇺🇸
TPI-Abuse
2026-09-08 20:26:33
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 16:26:26.705209 2026] [security2:error] [pid 12813:tid 12813] [client 34.6.134.151:1256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.iainrealtor.com"] [uri "/@fs/src/.env"] [unique_id "aqBvcpM81DffmBXWybZHSgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 20:07:04
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 16:06:56.746521 2026] [security2:error] [pid 321105:tid 321172] [client 34.6.134.151:44094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.joblackwell.com.jameskeeton.com"] [uri "/@fs/src/.env"] [unique_id "aqBq4JUNc5RCeUnw2mwAzwAAAgY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
neckaralb-admin.de
2026-09-08 19:47:59
(2 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 19:23:45
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 15:23:40.748049 2026] [security2:error] [pid 30171:tid 30171] [client 34.6.134.151:22664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.amaia.portalvasco.com"] [uri "/@fs/.env"] [unique_id "aqBgvFeCSF6GNrH2zoJ2ggAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 18:57:23
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 14:57:16.867740 2026] [security2:error] [pid 24247:tid 24247] [client 34.6.134.151:29326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grasslakepizzatime.com"] [uri "/@fs/app/.env"] [unique_id "aqBajOy7BRGowC8FLCAvNgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 18:32:37
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 14:32:34.046778 2026] [security2:error] [pid 1078:tid 1128] [client 34.6.134.151:51998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.davidholls.com"] [uri "/@fs/src/.env"] [unique_id "aqBUwqZ0nG5pim-t1aYvIAAAAdI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 17:53:01
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 13:52:54.608217 2026] [security2:error] [pid 26674:tid 26674] [client 34.6.134.151:56022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.casatualiving.com"] [uri "/@fs/../.env"] [unique_id "aqBLdqONfhdAejT0TSqm8wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-08 17:34:19
(4 hours ago)
668 requests with url.path *credentials.json
626 requests with url.path *config.json
131 requests ...
show more
668 requests with url.path *credentials.json
626 requests with url.path *config.json
131 requests with url.path *.php.bak
show less
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-08 17:33:38
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 13:33:34.894841 2026] [security2:error] [pid 21867:tid 21867] [client 34.6.134.151:32618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aceshd.mroxygen.org"] [uri "/@fs/root/.env"] [unique_id "aqBG7mSWyjNg3K8XQChUtgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-08 17:29:04
(4 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Mangelot Hosting
2026-09-08 17:11:57
(4 hours ago)
(modsecurity) srv102 ModSecurity 34.6.134.151 (NL/The Netherlands/151.134.6.34.bc.googleusercontent. ...
show more
(modsecurity) srv102 ModSecurity 34.6.134.151 (NL/The Netherlands/151.134.6.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇳🇱
Site.eu
2026-09-08 17:03:16
(4 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-08 16:42:30
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.134.151 (151.134.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 12:42:25.605910 2026] [security2:error] [pid 16753:tid 16753] [client 34.6.134.151:16222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.twincitytn.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252froot/.env"] [unique_id "aqA68XKasGp2A7MKhkfsMQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-08 16:07:40
(5 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-08 15:20:12
(6 hours ago)
Multiple WAF Violations
Web App Attack