🇺🇸
TPI-Abuse
2026-09-29 18:29:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.148.3.92 (92.3.148.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.3.92 (92.3.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 14:29:04.760235 2026] [security2:error] [pid 27548:tid 27559] [client 34.148.3.92:55674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fnaandpartners.com"] [uri "/.git/config"] [unique_id "arwDcFSV7nSbFARv9_VO1wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-29 00:22:34
(1 day ago)
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.148.3.92 (92.3.148.34.bc.googleuserconten ...
show more
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.148.3.92 (92.3.148.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.148.3.92 - - [29/Sep/2026:02:22:31 +0200] "GET /.env HTTP/1.1" 406 518 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.148.3.92 - - [29/Sep/2026:02:22:31 +0200] "GET /.env.local HTTP/1.1" 406 4885 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.148.3.92 - - [29/Sep/2026:02:22:31 +0200] "GET /.env.production HTTP/1.1" 406 4886 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Port Scan
🇺🇸
mnsf
2026-09-28 15:05:21
(2 days ago)
Scanning/Probing (13)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 05:13:01
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.148.3.92 (92.3.148.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.3.92 (92.3.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 01:12:53.465058 2026] [security2:error] [pid 25214:tid 25214] [client 34.148.3.92:44160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nationalenq.com"] [uri "/.git/config"] [unique_id "arn3VWACXUPo1__KSTsrhAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 03:19:07
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.148.3.92 (92.3.148.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.3.92 (92.3.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 23:19:03.955079 2026] [security2:error] [pid 1561:tid 1561] [client 34.148.3.92:43260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nathsharmaandcompany.com"] [uri "/.git/config"] [unique_id "arncp3bNxBRa9ZdZCjWWswAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-25 21:59:40
(4 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-24.
show less
Web App Attack
SSH
Hacking
🇫🇷
dynamix
2026-09-25 19:39:43
(5 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
mnsf
2026-09-25 07:05:15
(5 days ago)
Scanning/Probing (16)
Brute-Force
Web App Attack
🇷🇴
clauss
2026-09-24 05:13:48
(6 days ago)
34.148.3.92 - - [24/Sep/2026:08:13:47 +0300] "GET /phpinfo.php HTTP/2.0" 401 543 "-" "Mozilla/5.0 (W ...
show more
34.148.3.92 - - [24/Sep/2026:08:13:47 +0300] "GET /phpinfo.php HTTP/2.0" 401 543 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.148.3.92 - - [24/Sep/2026:08:13:48 +0300] "GET /info.php HTTP/2.0" 401 543 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
mnsf
2026-09-23 10:05:26
(1 week ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 20:57:19
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.148.3.92 (92.3.148.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.3.92 (92.3.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 16:57:16.147678 2026] [security2:error] [pid 13989:tid 13989] [client 34.148.3.92:46176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northwestarbor-culture.com"] [uri "/.git/config"] [unique_id "arGaLLHYQg2hqZAlehMb-AAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-21 17:00:06
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
lnklnx
2026-09-20 17:31:53
(1 week ago)
reader.lnklnx.com:443 34.148.3.92 - - [20/Sep/2026:12:31:50 -0500] "GET /.git/config HTTP/1.1" 302 5 ...
show more
reader.lnklnx.com:443 34.148.3.92 - - [20/Sep/2026:12:31:50 -0500] "GET /.git/config HTTP/1.1" 302 5408 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack