🇺🇸
TPI-Abuse
2026-09-30 04:49:21
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.40.120.121 (121.120.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 00:49:16.922169 2026] [security2:error] [pid 4116:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.120.121 (121.120.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 00:49:16.922169 2026] [security2:error] [pid 4116:tid 4116] [client 34.40.120.121:54762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hometechllc.com"] [uri "/.git/config"] [unique_id "aryUzPUMhk2THiwl8ix6YgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-28 17:14:50
(1 month ago)
Aggressive web scan
Web App Attack
🇧🇪
cmbplf
2026-09-28 08:39:28
(1 month ago)
3.539 requests with url.path *.env
Brute-Force
Bad Web Bot
🇳🇱
WeCloudit-Anti-Abuse
2026-09-27 05:07:13
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇩🇪
updown.io
2026-09-26 13:45:42
(1 month ago)
{"level":"info","ts":1790430341.033588,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.40.120.121","remote_port":"37202","client_ip":"34.40.120.121","proto":"HTTP/1.1","method":"GET","host":"apdex.leviawegner.com"," ...
show more
{"level":"info","ts":1790430341.033588,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.40.120.121","remote_port":"37202","client_ip":"34.40.120.121","proto":"HTTP/1.1","method":"GET","host":"apdex.leviawegner.com","uri":"/.env.development","headers":{"X-Nextjs-Request-Id":["e154248f"],"Cookie":["REDACTED"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, deflate"],"Accept":["*/*"],"Connection":["keep-alive"],"Next-Action":["x"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"apdex.leviawegner.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000099189,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1790430341.0362675,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.4
...
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 19:59:39
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.40.120.121 (121.120.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 15:59:32.165019 2026] [security2:error] [pid 18475:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.120.121 (121.120.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 15:59:32.165019 2026] [security2:error] [pid 18475:tid 18475] [client 34.40.120.121:51390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibook.micahgartman.com"] [uri "/.git/config"] [unique_id "arbSpPfhd9jG66TaLp739wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-24 22:00:20
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-23.
Web App Attack
SSH
Hacking
🇳🇱
Site.eu
2026-09-24 02:56:03
(1 month ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-09-22 18:56:46
(1 month ago)
34.40.120.121 - - [22/Sep/2026:12:56:45 -0600] "GET /.git/config HTTP/1.1" 301 3870 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 21:27:26
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.40.120.121 (121.120.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 17:27:21.589919 2026] [security2:error] [pid 30631:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.120.121 (121.120.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 17:27:21.589919 2026] [security2:error] [pid 30631:tid 30701] [client 34.40.120.121:41726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iamfluff.com"] [uri "/.git/config"] [unique_id "arGhOYl2KJsAdaeIvP-KLgAAAMg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
