🇺🇸
TPI-Abuse
2026-09-01 11:21:54
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.65.197.108 (108.197.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.197.108 (108.197.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:21:46.318314 2026] [security2:error] [pid 8618:tid 8618] [client 34.65.197.108:45102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.stage15.com"] [uri "/.env.production"] [unique_id "apa1SsqHOJhB2U2OLAFkKwAAAIk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
AWW-Admin
2026-09-01 11:19:42
(1 hour ago)
(mod_security) mod_security triggered on hostname [redacted] 34.65.197.108 (CH/Switzerland/108.197.6 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.65.197.108 (CH/Switzerland/108.197.65.34.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-09-01 11:06:25
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.197.108 (108.197.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.197.108 (108.197.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:06:18.141813 2026] [security2:error] [pid 30329:tid 30329] [client 34.65.197.108:59992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.dalessalesandservice.com"] [uri "/.env.save"] [unique_id "apaxquN5IpnPWve6eW2kTAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
tentwentyfour
2026-09-01 11:01:49
(2 hours ago)
Blocked for probing for sensitive web application components
Brute-Force
Web App Attack
🇩🇪
SCHAPPY
2026-09-01 10:52:07
(2 hours ago)
Mutliple attempts to access forbidden web resources, HTTP code 403.
Web App Attack
🇺🇸
SodaAudit.app
2026-09-01 10:39:33
(2 hours ago)
[sodaaudit.app] Web app attack. Timestamp: 2026-09-01T09:51:37.000Z. 4 probe events, 4 distinct path ...
show more
[sodaaudit.app] Web app attack. Timestamp: 2026-09-01T09:51:37.000Z. 4 probe events, 4 distinct path(s). Paths (payload): /.env, /storage/logs/laravel.log, /.env.bak, /wp-config.php.bak
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 10:16:19
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.197.108 (108.197.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.197.108 (108.197.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:16:13.192319 2026] [security2:error] [pid 7163:tid 7163] [client 34.65.197.108:34706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agrollum.com"] [uri "/.env.prod"] [unique_id "apal7Z73U1bR9msHGrCjswAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-01 09:50:03
(3 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇨🇭
zynex
2026-09-01 09:41:37
(3 hours ago)
URL Probing: /wp-config.php~
Web App Attack
🇨🇭
4server
2026-09-01 08:50:14
(4 hours ago)
[TueSep0110:50:07.8895052026][security2:error][pid2583005:tid2583286][client34.65.197.108:0]ModSecur ...
show more
[TueSep0110:50:07.8895052026][security2:error][pid2583005:tid2583286][client34.65.197.108:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\"wp-config\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"server6.hostingedominio.ch\"][uri\"/wp-config.php.swp\"][unique_id\"apaRvwrbZFRzBSOycfaKbwAAAAY\"]
show less
Hacking
Web App Attack
2026-09-01 07:59:12
(5 hours ago)
PSCSERV WPSCAN 34.65.197.108
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 07:50:09
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.197.108 (108.197.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.197.108 (108.197.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:50:02.778957 2026] [security2:error] [pid 27311:tid 27311] [client 34.65.197.108:44936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gemexpressions.com"] [uri "/.env.bak"] [unique_id "apaDqlzSPzQj2pp1c_IRlQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 07:31:16
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.197.108 (108.197.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.197.108 (108.197.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:31:10.457545 2026] [security2:error] [pid 17210:tid 17210] [client 34.65.197.108:54004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yourmenu.xyz"] [uri "/.env.backup"] [unique_id "apZ_PmUx6mYatx9NbYkEIwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 06:04:15
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.197.108 (108.197.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.197.108 (108.197.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:04:08.127194 2026] [security2:error] [pid 25801:tid 25801] [client 34.65.197.108:38038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cartiologyfilms.com"] [uri "/wp-config.php.bak"] [unique_id "apZq2Ot09qI3txLrfZo8UAAAAHI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-09-01 05:43:57
(7 hours ago)
Try to access /.env
Web App Attack