2026-06-15 15:20:57
(14 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.56.101.55 (US/United States/55.101.5 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.56.101.55 (US/United States/55.101.56.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
🇳🇱
Savvii
2026-06-15 14:51:14
(15 hours ago)
20 attempts against mh_ha-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
2026-06-15 10:16:17
(20 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 10:05:29
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.56.101.55 (55.101.56.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.56.101.55 (55.101.56.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 06:05:23.404930 2026] [security2:error] [pid 2787:tid 2787] [client 34.56.101.55:36060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.songforana.michaelsabbey.org"] [uri "/.env.copy"] [unique_id "ai_OY6zwtpEIkrd-J6tjkwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 08:15:59
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.56.101.55 (55.101.56.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.56.101.55 (55.101.56.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 04:15:56.068372 2026] [security2:error] [pid 4117:tid 4117] [client 34.56.101.55:48354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caddydad.com"] [uri "/.env.qa"] [unique_id "ai-0vO0ESdees44Vgdm8fwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-06-15 05:44:37
(1 day ago)
Unauthorized access to webpage admin
Web App Attack
🇨🇭
Origon
2026-06-15 03:03:13
(1 day ago)
http-sensitive-files - IP: 34.56.101.55 - time="2026-06-15T05:03:12+02:00" level=info msg="(555f66b ...
show more
http-sensitive-files - IP: 34.56.101.55 - time="2026-06-15T05:03:12+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.56.101.55 (US/396982) : 4h ban on Ip 34.56.101.55" module=db
show less
Web App Attack
🇺🇸
mnsf
2026-06-15 01:06:01
(1 day ago)
Scanning/Probing (111)
Request Overload (116)
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-06-14 20:12:20
(1 day ago)
20 attempts against mh_ha-misbehave-ban on kale
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Mark--
2026-06-14 11:46:38
(1 day ago)
Unauthorized connection attempt detected port 8080
Hacking
2026-06-14 07:51:05
(1 day ago)
34.56.101.55 - - [14/Jun/2026:15:51:05 +0800] "GET /.env.dev.local HTTP/1.1" 404 196 "-" "Mozilla/5. ...
show more
34.56.101.55 - - [14/Jun/2026:15:51:05 +0800] "GET /.env.dev.local HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 7.1.1; Moto E (4) Plus) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Nerdscave Hosting
2026-06-14 06:30:50
(1 day ago)
Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-14 06:27:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.56.101.55 (55.101.56.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.56.101.55 (55.101.56.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 02:27:41.118801 2026] [security2:error] [pid 31469:tid 31469] [client 34.56.101.55:47542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelprussin.com"] [uri "/.env.dev.local"] [unique_id "ai5J3eHRWwCIjKQgEcXx_gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-06-14 06:07:04
(2 days ago)
{"level":"info","ts":1781417219.9356196,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1781417219.9356196,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.56.101.55","remote_port":"43402","client_ip":"34.56.101.55","proto":"HTTP/1.1","method":"GET","host":"status.soundencounters.com","uri":"/.env.local.bak","headers":{"User-Agent":["Mozilla/5.0 (Linux; Android 9; SAMSUNG SM-G975U Build/PPR1.180610.011) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.soundencounters.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000080163,"size":0,"status":429,"resp_headers":{"Retry-After":["1"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
{"level":"info","ts":1781417219.9957995,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.56.101.55","remote_port":"43304
...
show less
DDoS Attack
Web App Attack
🇮🇹
VHosting
2026-06-14 02:10:03
(2 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack