๐บ๐ธ
TPI-Abuse
2026-09-01 14:05:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.80.124.195 (195.124.80.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.124.195 (195.124.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 10:04:58.050347 2026] [security2:error] [pid 11046:tid 11046] [client 34.80.124.195:42728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.karenjoyce.com"] [uri "/wp-config.php.bak"] [unique_id "apbbioQHr4aQYzhurA8R7wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 13:47:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.80.124.195 (195.124.80.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.124.195 (195.124.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:47:48.174879 2026] [security2:error] [pid 8919:tid 8919] [client 34.80.124.195:55506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.lesdwiniarczyk.com"] [uri "/.env.local"] [unique_id "apbXhP8DNPsmHE19PTCVMAAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Marc
2026-09-01 12:09:00
(1 day ago)
34.80.124.195 - - [01/Sep/2026:14:09:00 +0200] "GET /.env.example HTTP/1.1" 404 4617 "-" "crusader-w ...
show more
34.80.124.195 - - [01/Sep/2026:14:09:00 +0200] "GET /.env.example HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" 34.80.124.195 - - [01/Sep/2026:14:09:00 +0200] "GET /.env.old HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" 34.80.124.195 - - [01/Sep/2026:14:09:00 +0200] "GET /storage/logs/laravel.log HTTP/1.1" 404 4617 "-" "crusader-worker/1.0"
show less
Brute-Force
๐ฑ๐ป
garmtech.com
2026-09-01 10:58:07
(1 day ago)
Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 10:57:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.80.124.195 (195.124.80.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.124.195 (195.124.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:57:23.180126 2026] [security2:error] [pid 13461:tid 13461] [client 34.80.124.195:51884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.travelswithfriends.com"] [uri "/.env.backup"] [unique_id "apavk_I5zUwp5i7arZoR4AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-09-01 10:27:35
(1 day ago)
[redacted] 34.80.124.195 - - [01/Sep/2026:11:27:33 +0100] "GET /.[redacted] HTTP/1.1" 302 6763 0/413 ...
show more
[redacted] 34.80.124.195 - - [01/Sep/2026:11:27:33 +0100] "GET /.[redacted] HTTP/1.1" 302 6763 0/41309 "-" "crusader-worker/1.0" [redacted] 34.80.124.195 - - [01/Sep/2026:11:27:33 +0100] "GET /.[redacted] HTTP/1.1" 302 6763 0/56427 "-" "crusader-worker/1.0"
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 10:25:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.80.124.195 (195.124.80.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.124.195 (195.124.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:25:28.350108 2026] [security2:error] [pid 17142:tid 17142] [client 34.80.124.195:36324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alanbeckwith.com"] [uri "/.env.backup"] [unique_id "apaoGNN3zRlfm8cZKiCojQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
Inartis
2026-09-01 09:59:45
(1 day ago)
34.80.124.195 - - [01/Sep/2026:11:59:43 +0200] "GET /.env.bak HTTP/1.1" 403 5530 "-" "crusader-worke ...
show more
34.80.124.195 - - [01/Sep/2026:11:59:43 +0200] "GET /.env.bak HTTP/1.1" 403 5530 "-" "crusader-worker/1.0"
34.80.124.195 - - [01/Sep/2026:11:59:43 +0200] "GET /.env.prod HTTP/1.1" 403 5530 "-" "crusader-worker/1.0"
34.80.124.195 - - [01/Sep/2026:11:59:44 +0200] "GET /.env.production HTTP/1.1" 302 477 "-" "crusader-worker/1.0"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-09-01 09:59:05
(1 day ago)
[TueSep0111:59:02.2510832026][security2:error][pid2777509:tid2777715][client34.80.124.195:0]ModSecur ...
show more
[TueSep0111:59:02.2510832026][security2:error][pid2777509:tid2777715][client34.80.124.195:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"fisioterapiafalzone.ch\"][uri\"/.env.dev\"][unique_id\"apah5uXJghVMCOncKHh9SQAAAIc\"]
show less
Hacking
Web App Attack
๐ฉ๐ช
on-com
2026-09-01 09:46:19
(1 day ago)
URL scan
Brute-Force
Web App Attack
๐ฌ๐ง
Apache
2026-09-01 09:19:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.80.124.195 (TW/Taiwan/195.124.80.34.bc.googl ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.124.195 (TW/Taiwan/195.124.80.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
Anonymous
2026-09-01 08:17:43
(1 day ago)
34.80.124.195 - - [01/Sep/2026:08:17:43 +0000] "GET /.env.bak HTTP/1.1" 404 4319 "-" "crusader-worke ...
show more
34.80.124.195 - - [01/Sep/2026:08:17:43 +0000] "GET /.env.bak HTTP/1.1" 404 4319 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
SwinT
2026-09-01 08:00:07
(1 day ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
๐จ๐ญ
zynex
2026-09-01 07:30:36
(1 day ago)
URL Probing: /wp-config.php.bak
Web App Attack
๐ซ๐ท
masterguru
2026-09-01 07:17:46
(1 day ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack