๐บ๐ธ
TPI-Abuse
2026-09-01 09:45:28
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.80.14.107 (107.14.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.14.107 (107.14.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:45:24.035964 2026] [security2:error] [pid 1382:tid 1382] [client 34.80.14.107:39738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sophcomp.com"] [uri "/.env.prod"] [unique_id "apaetEiaAlknidufIdFQxQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-01 09:40:16
(1 hour ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
๐ฉ๐ช
BlueWire Hosting
2026-09-01 09:32:27
(1 hour ago)
High-confidence malicious configuration/VCS probe
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 08:51:08
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.14.107 (107.14.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.14.107 (107.14.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:51:03.459857 2026] [security2:error] [pid 10189:tid 10189] [client 34.80.14.107:51628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secure.adamsclothiers.com"] [uri "/wp-config.php.swp"] [unique_id "apaR9zgWCt8YwkzAmnvG7QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐พ
Rizzy
2026-09-01 07:45:47
(3 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-01 06:18:57
(4 hours ago)
cloudlinux2 fail2ban: 2026-09-01 08:14:37,898 fail2ban.filter [1605]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-01 08:14:37,898 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.80.14.107 - 2026-09-01 08:14:37cloudlinux2 fail2ban: 2026-09-01 08:14:37,878 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.80.14.107 - 2026-09-01 08:14:37cloudlinux2 fail2ban: 2026-09-01 08:14:37,831 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.80.14.107 - 2026-09-01 08:14:37cloudlinux2 fail2ban: 2026-09-01 08:14:38,007 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.80.14.107 - 2026-09-01 08:14:38cloudlinux2 fail2ban: 2026-09-01 08:14:37,868 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.80.14.107 - 2026-09-01 08:14:37cloudlinux2 fail2ban: 2026-09-01 08:14:38,046 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.80.14.107 - 2026-09-01 08:14:38cloudlinux2 fail2ban: 2026-09-01 08:14:38,059 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.80.14.107 - 2026-09-01 08:14:38cl
show less
Brute-Force
๐ฟ๐ฆ
conure.sh
2026-09-01 05:33:44
(5 hours ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-09-01 05:10:18
(5 hours ago)
[01/Sep/2026:08:10:17 +0300] -- 34.80.14.107 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /s ...
show more
[01/Sep/2026:08:10:17 +0300] -- 34.80.14.107 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /storage/logs/laravel.log HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 04:30:41
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.14.107 (107.14.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.14.107 (107.14.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:30:33.025370 2026] [security2:error] [pid 28575:tid 28585] [client 34.80.14.107:44558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beltagin.ep-dh.com"] [uri "/.env.backup"] [unique_id "apZU6UqCN7_eadEqktdeJAAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-01 02:29:59
(8 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 00:20:15
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.14.107 (107.14.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.14.107 (107.14.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:20:07.933281 2026] [security2:error] [pid 24504:tid 24504] [client 34.80.14.107:39288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.travelswithfriends.com"] [uri "/.env.dev"] [unique_id "apYaN-T3Q5vvq6Zhw7RQWgAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-31 23:51:38
(11 hours ago)
[ssd5.kdns.gr] httpd-config-scan: sites=www.colorbar.gr; logs=/var/log/httpd/domains/colorbar.gr.log ...
show more
[ssd5.kdns.gr] httpd-config-scan: sites=www.colorbar.gr; logs=/var/log/httpd/domains/colorbar.gr.log; samples=/.env.backup | /wp-config.php.bak | /.env.dev
show less
Hacking
Web App Attack
๐ณ๐ฑ
maxxsense
2026-08-31 23:43:24
(11 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.80.14.107 (TW/Taiwan/107.14.80.34.bc ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.80.14.107 (TW/Taiwan/107.14.80.34.bc.googleusercontent.com)
show less
SQL Injection
๐ฉ๐ช
raph
2026-08-31 22:34:24
(12 hours ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 22:19:25
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.14.107 (107.14.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.14.107 (107.14.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 18:19:17.122444 2026] [security2:error] [pid 10447:tid 10447] [client 34.80.14.107:47692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.cedricwillems.com"] [uri "/wp-config.php~"] [unique_id "apX95Q3_aAiotIVTHKxg4wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack