2026-11-06 19:40:07
UTC ·
(6 hours ago)
| [Dangerous/Indonesia] Aggressive IP 34.101.58.110 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-11-06 19:06:37
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.101.58.110 (110.58.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:06:31.719707 2026] [security2:error] [pid 23616:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.58.110 (110.58.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:06:31.719707 2026] [security2:error] [pid 23616:tid 23616] [client 34.101.58.110:41766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4bearspress.wolter-hausser.com"] [uri "/.git/config"] [unique_id "au4lN34EE7wTw6aucwEWPwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-11-06 17:38:31
UTC ·
(8 hours ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
SG/Singapore/110.58.101.34.bc.googleusercontent.com
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 17:18:25
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.101.58.110 (110.58.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:18:19.500247 2026] [security2:error] [pid 4590:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.58.110 (110.58.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:18:19.500247 2026] [security2:error] [pid 4590:tid 4590] [client 34.101.58.110:40532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4azadi.org"] [uri "/.git/config"] [unique_id "au4L2_cyGWc_w0nafF1fnwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 12:07:10
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.101.58.110 (110.58.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:07:03.475436 2026] [security2:error] [pid 29478:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.58.110 (110.58.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:07:03.475436 2026] [security2:error] [pid 29478:tid 29478] [client 34.101.58.110:45850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "495metro.com"] [uri "/.git/config"] [unique_id "au3C59vp8tEGQrOvFgdB8wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 11:38:24
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.101.58.110 (110.58.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:38:21.228367 2026] [security2:error] [pid 26101:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.58.110 (110.58.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:38:21.228367 2026] [security2:error] [pid 26101:tid 26101] [client 34.101.58.110:38364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4940brooklinedr.com.13waggoners.com"] [uri "/.git/config"] [unique_id "au28LUb1OW3Z2Z0ln5a9YAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-06 09:09:43
UTC ·
(16 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ID, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
Bad Web Bot
Web App Attack
🇦🇹
SchiWaGoA
2026-11-05 18:48:46
UTC ·
(1 day ago)
fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)
Web App Attack
Bad Web Bot
2026-11-05 17:35:06
UTC ·
(1 day ago)
Bot / scanning and/or hacking attempts: GET /.env.example HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.ci HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /.env.docker HTTP/1.1, POST / HTTP/1.1, GET /.env ...
show more
Bot / scanning and/or hacking attempts: GET /.env.example HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.ci HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /.env.docker HTTP/1.1, POST / HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.live HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.old HTTP/1.1
show less
Hacking
Web App Attack
2026-11-05 08:09:12
UTC ·
(1 day ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ID, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-02 16:04:33
UTC ·
(4 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-02 07:25:04
UTC ·
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇦🇺
rubixstudios
2026-11-02 07:02:02
UTC ·
(4 days ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
WellSpring
2026-10-31 21:04:36
UTC ·
(6 days ago)
env leak on wellspr.ing/.env.local — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 12:41:03
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.58.110 (110.58.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 08:40:58.257507 2026] [security2:error] [pid 8186:tid 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.58.110 (110.58.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 08:40:58.257507 2026] [security2:error] [pid 8186:tid 8186] [client 34.101.58.110:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.lumecircadian.com"] [uri "/.git/config"] [unique_id "auSQWi8tNaqzZmrcljyeHwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
