2026-10-08 18:44:09
(39 minutes ago)
Banned by Fail2Ban on server
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 18:43:50
(39 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.86.58.102 (102.58.86.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.58.102 (102.58.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 14:43:47.492647 2026] [security2:error] [pid 6669:tid 6669] [client 34.86.58.102:44368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coolingsprings.org"] [uri "/userfiles"] [unique_id "asfkY_STK87DTAv3Zd13VAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 18:28:27
(55 minutes ago)
(mod_security) mod_security (id:949110) triggered by 34.86.58.102 (102.58.86.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:949110) triggered by 34.86.58.102 (102.58.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 14:28:23.836489 2026] [security2:error] [pid 2179:tid 2179] [client 34.86.58.102:36150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "chuckwagon.org"] [uri "/.env"] [unique_id "asfgx-NhsQlVQ15lh7A8MAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
middelkoopcc
2026-10-08 18:08:10
(1 hour ago)
2026-10-08 20:06:14 AH10244: invalid URI path (/public/plugins/text/../../../../../../../../proc/sel ...
show more
2026-10-08 20:06:14 AH10244: invalid URI path (/public/plugins/text/../../../../../../../../proc/self/environ) && 2026-10-08 20:06:14 AH10244: invalid URI path (/%2e%2e/.env) && 2026-10-08 20:06:15 AH10244: invalid URI path (/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ) && 143 more within 20 minutes
show less
Web App Attack
🇫🇷
Campus France
2026-10-08 18:04:28
(1 hour ago)
[Thu Oct 08 20:04:09.356585 2026] [php:error] [pid 456085] [client 34.86.58.102:54106] script '/var/ ...
show more
[Thu Oct 08 20:04:09.356585 2026] [php:error] [pid 456085] [client 34.86.58.102:54106] script '/var/www/html/brume.org/document.php' not found or unable to stat
[Thu Oct 08 20:04:26.602733 2026] [php:error] [pid 456090] [client 34.86.58.102:54114] script '/var/www/html/brume.org/index.php' not found or unable to stat
[Thu Oct 08 20:04:27.231260 2026] [cgi:error] [pid 456090] [client 34.86.58.102:54114] AH02811: script not found or unable to stat: /usr/lib/cgi-bin/php-cgi.exe
[Thu Oct 08 20:04:27.523842 2026] [cgi:error] [pid 456090] [client 34.86.58.102:54114] AH02811: script not found or unable to stat: /usr/lib/cgi-bin/php
[Thu Oct 08 20:04:27.690449 2026] [php:error] [pid 456090] [client 34.86.58.102:54114] script '/var/www/html/brume.org/index.php' not found or unable to stat
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 18:03:52
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.86.58.102 (102.58.86.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.58.102 (102.58.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 14:03:46.303257 2026] [security2:error] [pid 22248:tid 22248] [client 34.86.58.102:34874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brooklynmeeting.org"] [uri "/.env.save"] [unique_id "asfbAlZyZF-1OaA_4CHFtwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Mendip_Defender
2026-10-08 17:51:35
(1 hour ago)
34.86.58.102 - - [08/Oct/2026:18:51:36 +0100] "GET /v3qf2y6kujfcewcotmw1 HTTP/1.1" 404 6331 "-" "Moz ...
show more
34.86.58.102 - - [08/Oct/2026:18:51:36 +0100] "GET /v3qf2y6kujfcewcotmw1 HTTP/1.1" 404 6331 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Bad Web Bot
🇩🇪
Gwyneth Llewelyn
2026-10-08 17:50:15
(1 hour ago)
2026/10/08 18:50:13 [error] 4060693#4060693: *1255656 access forbidden by rule, client: 34.86.58.102 ...
show more
2026/10/08 18:50:13 [error] 4060693#4060693: *1255656 access forbidden by rule, client: 34.86.58.102, server: bestasquadradas.org, request: "GET /_nuxt/../.env HTTP/2.0", host: "bestasquadradas.org"
2026/10/08 18:50:13 [error] 4060693#4060693: *1255659 access forbidden by rule, client: 34.86.58.102, server: bestasquadradas.org, request: "GET /api/orders/..%2f..%2f.env HTTP/2.0", host: "bestasquadradas.org"
2026/10/08 18:50:13 [error] 4060693#4060693: *1255661 access forbidden by rule, client: 34.86.58.102, server: bestasquadradas.org, request: "GET /api/data/..%2f..%2f.env HTTP/2.0", host: "bestasquadradas.org"
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 17:48:35
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.86.58.102 (102.58.86.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.58.102 (102.58.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 13:48:30.514968 2026] [security2:error] [pid 24976:tid 24976] [client 34.86.58.102:50728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belgiophar.org"] [uri "/.htpasswd"] [unique_id "asfXbvEOHisf14LzLK4NMQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-08 17:35:02
(1 hour ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 17:32:42
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.86.58.102 (102.58.86.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.58.102 (102.58.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 13:32:37.586601 2026] [security2:error] [pid 8546:tid 8546] [client 34.86.58.102:57464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asburys.org"] [uri "/media../.env"] [unique_id "asfTtbxC380KBiBBYFp6WwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-10-08 17:10:03
(2 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 17:09:47
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.86.58.102 (102.58.86.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.58.102 (102.58.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 13:09:40.193614 2026] [security2:error] [pid 18867:tid 18867] [client 34.86.58.102:45534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "al-bukhari.org"] [uri "/.env.example"] [unique_id "asfOVGSXF5uSk15KWI2JfwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-08 17:05:15
(2 hours ago)
Multiple WAF Violations
Web App Attack
2026-10-08 17:01:02
(2 hours ago)
...
Web App Attack
