🇺🇸
mnsf
2026-09-02 07:05:15
(1 hour ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇳🇱
SysAdmin Dylan
2026-09-02 06:15:19
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.118.170.104 (CA/Canada/104.170.118.34.bc.goo ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.170.104 (CA/Canada/104.170.118.34.bc.googleusercontent.com): 10 in the last 3600 secs
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-09-02 06:02:57
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.118.170.104 (104.170.118.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.170.104 (104.170.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:02:48.877727 2026] [security2:error] [pid 9807:tid 9807] [client 34.118.170.104:52068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.southtahoechurchofchrist.com"] [uri "/.git/config"] [unique_id "ape8CNYbCnqLToMhJjYuOgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-02 05:48:51
(3 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 05:42:51
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.118.170.104 (104.170.118.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.170.104 (104.170.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:42:43.763555 2026] [security2:error] [pid 31545:tid 31545] [client 34.118.170.104:37080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ozkanturker.com"] [uri "/var/www/.git/config"] [unique_id "ape3U-6D_7Z2-RHyv4FU1gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
openstrike.co.uk
2026-09-02 05:13:14
(3 hours ago)
12 attacks on VC URLs:
GET /backend/.git/config HTTP/1.1
Hacking
🇺🇸
TPI-Abuse
2026-09-02 05:12:42
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.118.170.104 (104.170.118.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.170.104 (104.170.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:12:36.024169 2026] [security2:error] [pid 11076:tid 11076] [client 34.118.170.104:50974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.toileandbubble.com"] [uri "/html/.git/config"] [unique_id "apewRB7i7Tr6Y7GiZIQyOQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-02 04:32:01
(4 hours ago)
Multiple WAF Violations
Web App Attack
🇩🇪
FD-IX
2026-09-02 03:27:55
(5 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇩🇪
dbmwebdesign
2026-09-02 02:45:05
(6 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇩🇪
NewGastroline
2026-09-02 00:26:47
(8 hours ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-09-02 00:20:09
(8 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-09-02 00:19:37
(8 hours ago)
34.118.170.104 - - [02/Sep/2026:02:19:33 +0200] "GET /.git/config HTTP/1.1" 403 4435 "-" "crusader-w ...
show more
34.118.170.104 - - [02/Sep/2026:02:19:33 +0200] "GET /.git/config HTTP/1.1" 403 4435 "-" "crusader-worker/1.0"
34.118.170.104 - - [02/Sep/2026:02:19:33 +0200] "GET /wordpress/.git/config HTTP/1.1" 404 4432 "-" "crusader-worker/1.0"
34.118.170.104 - - [02/Sep/2026:02:19:33 +0200] "GET /app/.git/config HTTP/1.1" 404 4432 "-" "crusader-worker/1.0"
34.118.170.104 - - [02/Sep/2026:02:19:33 +0200] "GET /html/.git/config HTTP/1.1" 404 4431 "-" "crusader-worker/1.0"
34.118.170.104 - - [02/Sep/2026:02:19:33 +0200] "GET /site/.git/config HTTP/1.1" 404 4432 "-" "crusader-worker/1.0"
34.118.170.104 - - [02/Sep/2026:02:19:33 +0200] "GET /www/.git/config HTTP/1.1" 404 4432 "-" "crusader-worker/1.0"
34.118.170.104 - - [02/Sep/2026:02:19:33 +0200] "GET /var/www/.git/config HTTP/1.1" 404 4431 "-" "crusader-worker/1.0"
34.118.170.104 - - [02/Sep/2026:02:19:33 +0200] "GET /backend/.git/config HTTP/1.1" 404 4431 "-" "crusader-worker/1.0"
34.118.170.104 - - [02/Sep/2026:02:19:33 +0200] "GET /htdocs/.git/co
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-02 00:16:28
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.118.170.104 (104.170.118.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.170.104 (104.170.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 20:16:20.568632 2026] [security2:error] [pid 6157:tid 6157] [client 34.118.170.104:58714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.desertvacationvillas.com"] [uri "/site/.git/config"] [unique_id "apdq1CSCkFKfGviHwFGpTgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 22:34:57
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.118.170.104 (104.170.118.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.170.104 (104.170.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 18:34:52.016132 2026] [security2:error] [pid 27081:tid 27088] [client 34.118.170.104:48504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "traceyschaper.com"] [uri "/htdocs/.git/config"] [unique_id "apdTDNhXESsNEkeLDZRkMAAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack