2026-09-01 02:13:09
(32 minutes ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 01:25:53
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.96.154.159 (159.154.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.154.159 (159.154.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 21:25:48.028234 2026] [security2:error] [pid 29602:tid 29602] [client 34.96.154.159:41332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.actionrevshop.mainstreetofficesuites.com"] [uri "/.git/config"] [unique_id "apYpnD9ISR29B4CcydGopgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-31 17:35:45
(9 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
2026-08-31 17:25:01
(9 hours ago)
suspicious request in access.log
Web App Attack
🇳🇱
U.N.Owen
2026-08-31 15:09:51
(11 hours ago)
34.96.154.159 - - [31/Aug/2026:18:09:47 +0300] "GET /phpinfo.php HTTP/2.0" 404 6355 "-" "Mozilla/5.0 ...
show more
34.96.154.159 - - [31/Aug/2026:18:09:47 +0300] "GET /phpinfo.php HTTP/2.0" 404 6355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.154.159 - - [31/Aug/2026:18:09:47 +0300] "GET /info.php HTTP/2.0" 404 6355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.154.159 - - [31/Aug/2026:18:09:47 +0300] "GET /php.php HTTP/2.0" 404 6355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.154.159 - - [31/Aug/2026:18:09:48 +0300] "GET /i.php HTTP/2.0" 404 6355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.154.159 - - [31/Aug/2026:18:09:48 +0300] "GET /pi.php HTTP/2.0" 404 6355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.15
...
show less
Hacking
Web App Attack
🇸🇪
vaia.cloud
2026-08-31 15:00:02
(11 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 14:30:12
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.96.154.159 (159.154.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.154.159 (159.154.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 10:30:07.664089 2026] [security2:error] [pid 13155:tid 13166] [client 34.96.154.159:60640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.anointedtour.com.havacubvision.com"] [uri "/.git/config"] [unique_id "apWP77kla295uIexWjqpAAAAAMg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-31 13:56:16
(12 hours ago)
GET /.git/config HTTP/1.1
...
Web App Attack
🇳🇱
Site.eu
2026-08-31 10:25:06
(16 hours ago)
Excessive multi-domain requests
Brute-Force
2026-08-31 09:47:54
(16 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇫🇷
dynamix
2026-08-31 08:05:13
(18 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 07:30:39
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.96.154.159 (159.154.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.154.159 (159.154.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 03:30:34.835772 2026] [security2:error] [pid 24969:tid 24969] [client 34.96.154.159:43676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.anhourofshortstories.johnpritchett.com"] [uri "/.git/config"] [unique_id "apUtmt_wXfA4YaR0NigIAAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-08-31 07:15:02
(19 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 06:55:58
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.96.154.159 (159.154.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.154.159 (159.154.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 02:55:50.035802 2026] [security2:error] [pid 21470:tid 21480] [client 34.96.154.159:58562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.anglicancommission.aafm.us"] [uri "/.git/config"] [unique_id "apUldrdL5yVXANojQV3ABgAAAUg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-08-31 06:12:04
(20 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack