๐ธ๐ช
vaia.cloud
2026-09-29 19:50:02
(2 weeks ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ฌ๐ง
venus.launch.bz
2026-09-29 00:21:19
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 34.121.154.98 (US/United States/98.154. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.121.154.98 (US/United States/98.154.121.34.bc.googleusercontent.com)
show less
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-09-28 03:47:06
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.121.154.98 (98.154.121.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.121.154.98 (98.154.121.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 23:47:02.445075 2026] [security2:error] [pid 28684:tid 28684] [client 34.121.154.98:59824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tekrav.com"] [uri "/.git/config"] [unique_id "arnjNkBx8M2sEBYhnMa1dAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-28 03:20:52
(2 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-09-27 05:23:37
(3 weeks ago)
Try to access /.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 13:50:49
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.121.154.98 (98.154.121.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.121.154.98 (98.154.121.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 09:50:45.716579 2026] [security2:error] [pid 18826:tid 18826] [client 34.121.154.98:41770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arsprobabile.com"] [uri "/.git/config"] [unique_id "arfNtRwthwJbKpVxx6vPPwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 11:33:40
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.121.154.98 (98.154.121.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.121.154.98 (98.154.121.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 07:33:36.754910 2026] [security2:error] [pid 13300:tid 13300] [client 34.121.154.98:35460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aam-artists.com"] [uri "/.git/config"] [unique_id "aretkND9-ksCrOnOc3ridgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 11:15:23
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.121.154.98 (98.154.121.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.121.154.98 (98.154.121.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 07:15:18.338494 2026] [security2:error] [pid 30283:tid 30283] [client 34.121.154.98:35262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aamaquera.com"] [uri "/.git/config"] [unique_id "arepRuUMMQDxwjBg0obvwwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-09-26 11:05:05
(3 weeks ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
Anonymous
2026-09-25 20:48:34
(3 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-09-24 18:27:01
(3 weeks ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-22 22:00:57
(3 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-21.
show less
Web App Attack
SSH
Hacking
๐ณ๐ฑ
thedreamer.nl
2026-09-21 23:19:19
(3 weeks ago)
34.121.154.98 - - [22/Sep/2026:01:17:19 +0200] "GET /.git/config HTTP/1.1" 200 1007 "-" "Mozilla/5.0 ...
show more
34.121.154.98 - - [22/Sep/2026:01:17:19 +0200] "GET /.git/config HTTP/1.1" 200 1007 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "US" "Council Bluffs" "41.25910" "-95.85170"
34.121.154.98 - - [22/Sep/2026:01:17:19 +0200] "GET /.env HTTP/1.1" 200 1007 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "US" "Council Bluffs" "41.25910" "-95.85170"
34.121.154.98 - - [22/Sep/2026:01:17:19 +0200] "GET /.env.local HTTP/1.1" 200 1007 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "US" "Council Bluffs" "41.25910" "-95.85170"
34.121.154.98 - - [22/Sep/2026:01:17:20 +0200] "GET /.env.production HTTP/1.1" 200 1007 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "US" "Council Bluffs" "41.25910" "-95
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 23:17:14
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.121.154.98 (98.154.121.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.121.154.98 (98.154.121.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:17:09.723443 2026] [security2:error] [pid 15737:tid 15737] [client 34.121.154.98:56784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thedreamcatchers.eu"] [uri "/.git/config"] [unique_id "arG69URnZJ4YiprtIs0XpAAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 23:01:05
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.121.154.98 (98.154.121.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.121.154.98 (98.154.121.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:00:58.818792 2026] [security2:error] [pid 32119:tid 32217] [client 34.121.154.98:48838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thedowntonstory.com"] [uri "/.git/config"] [unique_id "arG3Kgc8UNyNF4O_5pgm2AAAANA"]
show less
Brute-Force
Bad Web Bot
Web App Attack