2026-09-19 11:17:33
(6 hours ago)
Blocked by ModSec and CSF
Port Scan
🇺🇸
TPI-Abuse
2026-09-19 10:57:20
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.114.74 (74.114.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.114.74 (74.114.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 06:57:13.086521 2026] [security2:error] [pid 22865:tid 22865] [client 34.80.114.74:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.frogmouthatx.com"] [uri "/@fs/../.env"] [unique_id "aq5qiQ4MEgHGyFczrSQRaQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-09-19 09:40:13
(7 hours ago)
csagent: score 20.2: secrets grab x2, 404 noise floor x1; 1 domain(s) in 1s
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 09:11:52
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.114.74 (74.114.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.114.74 (74.114.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 05:11:46.917622 2026] [security2:error] [pid 25110:tid 25110] [client 34.80.114.74:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.dentguyvt.com"] [uri "/@fs/src/.env"] [unique_id "aq5R0guifYnxldxhdgB9BQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-09-19 08:10:23
(9 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 07:58:07
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.114.74 (74.114.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.114.74 (74.114.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 03:58:00.594692 2026] [security2:error] [pid 25222:tid 25222] [client 34.80.114.74:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.caspina.com"] [uri "/@fs/src/.env"] [unique_id "aq5AiH01HMIVB2nmddy3lwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 07:34:00
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.114.74 (74.114.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.114.74 (74.114.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 03:33:53.395193 2026] [security2:error] [pid 3746:tid 3746] [client 34.80.114.74:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.bradleybarefoot.com"] [uri "/web.config"] [unique_id "aq464eo0sYSh9OdL5c5qSAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-18 23:10:03
(18 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇪🇸
el-brujo
2026-09-18 14:38:00
(1 day ago)
HTTP DDoS Attack Layer 7
DDoS Attack
2026-09-18 04:22:22
(1 day ago)
Detected by CrowdSec: crowdsecurity/http-crawl-non_statics
Web App Attack
🇮🇩
sockominfo
2026-09-18 03:00:34
(1 day ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Email Spam
🇮🇩
sockominfo
2026-09-18 02:00:19
(1 day ago)
Active Response: IP 34.80.114.74 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Repo ...
show more
Active Response: IP 34.80.114.74 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
2026-09-18 01:56:55
(1 day ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.80.114.74 (TW/Tai ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.80.114.74 (TW/Taiwan/74.114.80.34.bc.googleusercontent.com)
show less
Bad Web Bot
2026-09-18 00:27:10
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇪
bazter.pro
2026-09-18 00:05:49
(1 day ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack