๐บ๐ธ
TPI-Abuse
2026-09-29 18:37:17
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.11.60.75 (75.60.11.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.60.75 (75.60.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 14:37:10.557534 2026] [security2:error] [pid 27639:tid 27639] [client 34.11.60.75:58654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newlifefoodbarn.intnlc.org"] [uri "/.git/config"] [unique_id "arwFVo0TLl565Xs1r3wm4wAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
metaldaze80
2026-09-25 02:27:16
(3 weeks ago)
Fail2ban: 5 bad attempts in 10m on tcp port http,https
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-25 00:45:50
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.11.60.75 (75.60.11.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.60.75 (75.60.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 20:45:46.890788 2026] [security2:error] [pid 20133:tid 20133] [client 34.11.60.75:53832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rentaroller.com.au"] [uri "/.git/config"] [unique_id "arXEOtsaILKg6xam7Ir7_gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-23 10:45:00
(3 weeks ago)
IP matched detection query many 3xx errors.
Brute-Force
Anonymous
2026-09-23 10:17:12
(3 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-09-22 10:55:26
(3 weeks ago)
34.11.60.75 - - [22/Sep/2026:10:55:04 +0000] "GET /turismo/puente-de-lata/.env HTTP/1.1" 403 12539 " ...
show more
34.11.60.75 - - [22/Sep/2026:10:55:04 +0000] "GET /turismo/puente-de-lata/.env HTTP/1.1" 403 12539 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.11.60.75"
34.11.60.75 - - [22/Sep/2026:10:55:05 +0000] "GET /turismo/puente-de-lata/.env.local HTTP/1.1" 403 12469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.11.60.75"
34.11.60.75 - - [22/Sep/2026:10:55:05 +0000] "GET /turismo/puente-de-lata/.env.production HTTP/1.1" 403 12469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.11.60.75"
34.11.60.75 - - [22/Sep/2026:10:55:05 +0000] "GET /turismo/puente-de-lata/.env.staging HTTP/1.1" 403 12469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.11.60.75"
34.11.60.75 - -
...
show less
Web App Attack
๐ฉ๐ช
kkw
2026-09-21 23:34:24
(3 weeks ago)
[REDACTED] 34.11.60.75 - - [22/Sep/2026:01:34:23 +0200] "GET /.git/config HTTP/1.1" 301 633 "-" "Moz ...
show more
[REDACTED] 34.11.60.75 - - [22/Sep/2026:01:34:23 +0200] "GET /.git/config HTTP/1.1" 301 633 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
... (mode: searching http-sensitive-files)
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-21 22:34:44
(3 weeks ago)
(NGINX) Security rule triggered from 34.11.60.75 (US/United States/75.60.11.34.bc.googleusercontent. ...
show more
(NGINX) Security rule triggered from 34.11.60.75 (US/United States/75.60.11.34.bc.googleusercontent.com): 5 in the last 3600 secs
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 18:01:07
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.11.60.75 (75.60.11.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.60.75 (75.60.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:01:00.590588 2026] [security2:error] [pid 32406:tid 32406] [client 34.11.60.75:49614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prodivediving.com"] [uri "/.git/config"] [unique_id "arFw3AKx2gPEIa-R-v2odAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
COMAITE
2026-09-21 15:41:07
(3 weeks ago)
Suspicious URL access.
Web App Attack
๐บ๐ธ
masterguru
2026-09-16 11:03:35
(1 month ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-147)
Hacking
๐บ๐ธ
agenciahypelab.com.br
2026-09-16 11:01:08
(1 month ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐ฎ๐น
VHosting
2026-09-16 11:00:05
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack