๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-11-04 01:51:46
(5 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-11-03 21:42:28
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.245.124 (124.245.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:42:23.626386 2026] [security2:error] [pid 30340:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.245.124 (124.245.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:42:23.626386 2026] [security2:error] [pid 30340:tid 30340] [client 34.104.245.124:42778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "renomarsh.com"] [uri "/.git/config"] [unique_id "aupVP6v-q6kZElMC_0mNwgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-11-03 13:31:54
(17 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-11-03 09:31:02
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.245.124 (124.245.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:30:56.532655 2026] [security2:error] [pid 5293:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.245.124 (124.245.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:30:56.532655 2026] [security2:error] [pid 5293:tid 5293] [client 34.104.245.124:40266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rjhills.com"] [uri "/.git/config"] [unique_id "aump0L9Jd9AAXccRyNMVZQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
pipeline.es
2026-11-03 07:53:07
(23 hours ago)
Web scanning / probing for vulnerable paths | URL: /administrator/.env | Evidence: terminalb.pt 34.104.245.124 - - [03/Nov/2026:08:52:24 +0100] \"GET /administrator/.env HTTP/1.1\" 404 22433 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK ...
show more
Web scanning / probing for vulnerable paths | URL: /administrator/.env | Evidence: terminalb.pt 34.104.245.124 - - [03/Nov/2026:08:52:24 +0100] \"GET /administrator/.env HTTP/1.1\" 404 22433 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=JP 24592 | ASN: GOOGLE-CLOUD-PLATFORM | Country: JP
show less
Port Scan
Web App Attack
๐ฉ๐ช
DEV-DNS
2026-11-03 06:50:46
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
Anonymous
2026-11-03 04:29:45
(1 day ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
Anonymous
2026-11-03 03:32:42
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-11-03 02:51:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.104.245.124 (124.245.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:51:39.435126 2026] [security2:error] [pid 862:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.245.124 (124.245.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:51:39.435126 2026] [security2:error] [pid 862:tid 862] [client 34.104.245.124:51792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rjdyckarchitect.com"] [uri "/.git/config"] [unique_id "aulMO8vF5ZZ0bDuI2gozNwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-02 19:05:21
(1 day ago)
Multiple web server 400 error codes from same source ip
Web App Attack
๐ฎ๐น
VHosting
2026-11-02 16:40:08
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-11-02 16:21:25
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.104.245.124 (124.245.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 11:21:21.127088 2026] [security2:error] [pid 2256:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.245.124 (124.245.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 11:21:21.127088 2026] [security2:error] [pid 2256:tid 2256] [client 34.104.245.124:40890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robbieburnsnight.com"] [uri "/.git/config"] [unique_id "aui4geJjmV9i_Fw--77DuQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
Origon
2026-11-02 15:00:49
(1 day ago)
plesk-modsecurity - IP: 34.104.245.124 - [02/Nov/2026:16:00:48.080642 +0100] auiloIal-cQl1-5v3omPlAAAAAo 34.104.245.124 46116 127.0.0.1 7081 [02/Nov/2026:16:00:48.596652 +0100] auiloIal-cQl1-5v3omPlgAAABQ 34.104.245.124 46158 127.0.0.1 7081 [02/Nov/ ...
show more
plesk-modsecurity - IP: 34.104.245.124 - [02/Nov/2026:16:00:48.080642 +0100] auiloIal-cQl1-5v3omPlAAAAAo 34.104.245.124 46116 127.0.0.1 7081 [02/Nov/2026:16:00:48.596652 +0100] auiloIal-cQl1-5v3omPlgAAABQ 34.104.245.124 46158 127.0.0.1 7081 [02/Nov/2026:16:00:48.856440 +0100] auiloK8-d3oBhnIGNkmXCQAAAMM 34.104.245.124 46172 127.0.0.1 7081 [02/Nov/2026:16:00:49.107304 +0100] auiloYal-cQl1-5v3omPlwAAABE 34.104.245.124 46186 127.0.0.1 7081
show less
Web App Attack
๐ณ๐ฑ
Savvii
2026-11-02 12:26:55
(1 day ago)
20 attempts against mh_ha-misbehave-ban on guava
Brute-Force
Bad Web Bot
Web App Attack