🇺🇸
TPI-Abuse
2026-09-13 05:36:32
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.10.227.6 (6.227.10.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.10.227.6 (6.227.10.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 01:36:23.604444 2026] [security2:error] [pid 15771:tid 15771] [client 34.10.227.6:47834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "technlunch.blog"] [uri "/.env.backup"] [unique_id "aqY2V7iHWjkn3hv_9sPvlgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-13 04:59:32
(1 month ago)
4.065 requests from abuseipdb.com blacklisted IP (9mos1w6d)
Brute-Force
Bad Web Bot
🇬🇧
consul.to
2026-09-13 04:28:03
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 04:22:23
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.10.227.6 (6.227.10.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.10.227.6 (6.227.10.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 00:22:18.525576 2026] [security2:error] [pid 13569:tid 13569] [client 34.10.227.6:43240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "directnic.blog"] [uri "/.//.env"] [unique_id "aqYk-t9Er8s14XUmklvR-wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-12 15:44:45
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
e.fierstra
2026-09-12 14:35:42
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-09-12 11:35:13
(1 month ago)
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-11 22:18:56
(1 month ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 19:19:05
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.10.227.6 (6.227.10.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.10.227.6 (6.227.10.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 15:19:01.767550 2026] [security2:error] [pid 19056:tid 19056] [client 34.10.227.6:58052] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bellehollow.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bellehollow.com"] [uri "/z9x8c7v6b5-debug-trigger-bellehollow.com"] [unique_id "aqRUJWsJ8OtV6wmWIVYnAAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-09-11 19:14:03
(1 month ago)
Blocked by ConnMonitor
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 18:55:30
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.10.227.6 (6.227.10.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.10.227.6 (6.227.10.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 14:55:26.494325 2026] [security2:error] [pid 15027:tid 15027] [client 34.10.227.6:36992] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bella-vista.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bella-vista.com"] [uri "/z9x8c7v6b5-debug-trigger-bella-vista.com"] [unique_id "aqROnmkoaihi_51fLH7rpgAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 18:38:52
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.10.227.6 (6.227.10.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.10.227.6 (6.227.10.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 14:38:45.829705 2026] [security2:error] [pid 14847:tid 14847] [client 34.10.227.6:49008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belgiophar.com"] [uri "/.env"] [unique_id "aqRKtaLTv5QtCLEs7i1hNwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 18:07:51
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.10.227.6 (6.227.10.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.10.227.6 (6.227.10.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 14:07:43.301854 2026] [security2:error] [pid 914:tid 914] [client 34.10.227.6:59480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beirutbazar.com"] [uri "/.git/config"] [unique_id "aqRDb4TxrTUZBp72Bc3wGgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-11 18:05:36
(1 month ago)
Scanning/Probing (14)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-09-11 17:45:54
(1 month ago)
2026/09/11 17:45:53 [error] 555594#555594: *1704160 access forbidden by rule, client: 34.10.227.6, s ...
show more
2026/09/11 17:45:53 [error] 555594#555594: *1704160 access forbidden by rule, client: 34.10.227.6, server: behemoti.com, request: "GET /.dockerenv HTTP/2.0", host: "behemoti.com"
2026/09/11 17:45:53 [error] 555594#555594: *1704169 access forbidden by rule, client: 34.10.227.6, server: behemoti.com, request: "GET /.vite/manifest.json HTTP/2.0", host: "behemoti.com"
2026/09/11 17:45:53 [error] 555594#555594: *1704171 access forbidden by rule, client: 34.10.227.6, server: behemoti.com, request: "GET /.env?raw HTTP/2.0", host: "behemoti.com"
...
show less
Web App Attack
