🇺🇸
TtlPst
2026-11-04 14:04:11
UTC ·
(4 days ago)
App probing / vulnerability scanning in path /.git/config
Web App Attack
Bad Web Bot
🇬🇧
consul.to
2026-11-04 02:10:44
UTC ·
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 01:27:16
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.95.27 (27.95.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:27:13.210890 2026] [security2:error] [pid 3656:tid 365 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.95.27 (27.95.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:27:13.210890 2026] [security2:error] [pid 3656:tid 3656] [client 34.146.95.27:46760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radicalchange.org"] [uri "/.git/config"] [unique_id "auqJ8TNNy_wY0vAaTGw-NAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Lee Daniel
2026-11-04 01:25:31
UTC ·
(5 days ago)
34.146.95.27 - - [03/Nov/2026:20:25:31 -0500] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 00:29:02
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.95.27 (27.95.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:28:54.509861 2026] [security2:error] [pid 6601:tid 660 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.95.27 (27.95.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:28:54.509861 2026] [security2:error] [pid 6601:tid 6601] [client 34.146.95.27:33172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radiawa.email"] [uri "/.git/config"] [unique_id "aup8Ru-PEx5fTPLA1D-QYwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 17:57:19
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.95.27 (27.95.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 12:57:11.331252 2026] [security2:error] [pid 26586:tid 26 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.95.27 (27.95.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 12:57:11.331252 2026] [security2:error] [pid 26586:tid 26586] [client 34.146.95.27:41106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radiantmessages.com"] [uri "/.git/config"] [unique_id "auogd-hJgQT2sz3NNnfBwwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-03 04:47:11
UTC ·
(5 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-02 14:44:39
UTC ·
(6 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 13:46:56
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.95.27 (27.95.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:46:50.500094 2026] [security2:error] [pid 7990:tid 799 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.95.27 (27.95.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:46:50.500094 2026] [security2:error] [pid 7990:tid 7990] [client 34.146.95.27:39194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reimaginingchess.com"] [uri "/.git/config"] [unique_id "auiUStKXwffWWzoOhUQvOQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-11-02 13:05:50
UTC ·
(6 days ago)
csagent: score 20.2: secrets grab x2, 404 noise floor x1; 1 domain(s) in 2s
Web App Attack
🇮🇹
VHosting
2026-11-02 11:50:04
UTC ·
(6 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
altenglaner
2026-11-02 10:33:36
UTC ·
(6 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
Anonymous
2026-11-02 08:03:10
UTC ·
(6 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack