2026-10-17 11:13:52
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
curiosity
2026-10-17 10:24:42
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing
Web App Attack
Hacking
2026-10-17 09:34:28
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 04:47:44
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 00:47:38.670008 2026] [security2:error] [pid 17119:tid 17119] [client 34.92.93.159:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.grainavi.com"] [uri "/.git/config"] [unique_id "atL96j3akBwagXWzCZ4sWwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-17 01:56:13
(1 week ago)
[SatOct1703:56:08.2913792026][security2:error][pid1936316:tid1936392][client34.92.93.159:0]ModSecuri ...
show more
[SatOct1703:56:08.2913792026][security2:error][pid1936316:tid1936392][client34.92.93.159:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webdisk.gmint.ch\"][uri\"/.env.bak\"][unique_id\"atLVuLSl6WKGvQZOxNHCOgAAAMk\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 01:20:44
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 21:20:40.825113 2026] [security2:error] [pid 30135:tid 30135] [client 34.92.93.159:58950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.globalpackets.net"] [uri "/.git/config"] [unique_id "atLNaDrGw8khcK3b4ZhJKgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 00:43:04
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 20:42:56.682587 2026] [security2:error] [pid 18250:tid 18250] [client 34.92.93.159:49350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.glamorgirl.net"] [uri "/.git/config"] [unique_id "atLEkPXkS9edaTg3rSFjhwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-16 22:16:59
(1 week ago)
Automated report: 3 malicious HTTP request(s) blocked by WAF/IPS on public web services. Requested: ...
show more
Automated report: 3 malicious HTTP request(s) blocked by WAF/IPS on public web services. Requested: /.env.example, /.env.dist, /.env.yaml
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 15:56:27
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:56:21.155059 2026] [security2:error] [pid 24884:tid 24884] [client 34.92.93.159:47724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.fsmfl.com"] [uri "/.git/config"] [unique_id "atJJJRZNo_4RXiZm8XxQYwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 15:30:06
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:29:59.578489 2026] [security2:error] [pid 22652:tid 22652] [client 34.92.93.159:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.frogmouthatx.com"] [uri "/.git/config"] [unique_id "atJC9yoXMdsx1-oGO4f60gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 15:01:58
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:01:55.238432 2026] [security2:error] [pid 25521:tid 25521] [client 34.92.93.159:34286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.frenosilent.ar"] [uri "/.git/config"] [unique_id "atI8Y0lxZWDDUu5pN_xtHAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 12:48:13
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:48:08.555410 2026] [security2:error] [pid 19119:tid 19119] [client 34.92.93.159:54856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.formationone.com"] [uri "/.git/config"] [unique_id "atIdCFMJkKOW49HAMZkpdQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 03:46:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:46:11.407226 2026] [security2:error] [pid 2592:tid 2611] [client 34.92.93.159:39906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.fandgins.com"] [uri "/.git/config"] [unique_id "atGeA-gt1PRCf6XHzRzdYQAAANA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
rellik
2026-10-16 01:46:00
(1 week ago)
Brute Force Scanning Critical Files & Directories & Admin Connection Attempts
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 01:10:25
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.93.159 (159.93.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 21:10:19.374227 2026] [security2:error] [pid 17211:tid 17211] [client 34.92.93.159:33220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.exoticcarwrap.com"] [uri "/.git/config"] [unique_id "atF5e43Ecn3-_hoFXG-eBwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack