🇺🇸
TPI-Abuse
2026-11-13 09:56:58
UTC ·
(7 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.159.31.147 (147.31.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:56:53.129406 2026] [security2:error] [pid 16209:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.31.147 (147.31.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:56:53.129406 2026] [security2:error] [pid 16209:tid 16209] [client 34.159.31.147:55242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cc.austinbiblestudents.org"] [uri "/.git/config"] [unique_id "avbe5UqXMRgPccR1I5AyoAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 06:52:46
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.159.31.147 (147.31.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:52:43.432443 2026] [security2:error] [pid 32064:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.31.147 (147.31.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:52:43.432443 2026] [security2:error] [pid 32064:tid 32064] [client 34.159.31.147:35916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cbtattam.com"] [uri "/.git/config"] [unique_id "avazu7sWVdm8T5o6NS0DOQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 06:14:08
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.159.31.147 (147.31.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:14:01.205161 2026] [security2:error] [pid 18738:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.31.147 (147.31.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:14:01.205161 2026] [security2:error] [pid 18738:tid 18738] [client 34.159.31.147:56974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cbsproductionsinc.com"] [uri "/.git/config"] [unique_id "avaqqcVNcVGnXsVMi9O5EgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-11-13 05:01:41
UTC ·
(5 hours ago)
[FriNov1306:01:38.4764792026][security2:error][pid2334438:tid2334557][client34.159.31.147:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\} ...
show more
[FriNov1306:01:38.4764792026][security2:error][pid2334438:tid2334557][client34.159.31.147:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"cbri.ch\"][uri\"/\"][unique_id\"avaZso6DxBKPDw0Ga1vWMgAAAQU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 04:52:41
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.159.31.147 (147.31.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:52:33.940987 2026] [security2:error] [pid 2230:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.31.147 (147.31.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:52:33.940987 2026] [security2:error] [pid 2230:tid 2230] [client 34.159.31.147:59110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cbrarauco.cl"] [uri "/.git/config"] [unique_id "avaXkXT82tpt6LgIOLC-CgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-13 03:18:51
UTC ·
(6 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-13 03:18:25
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.159.31.147 (147.31.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:18:19.009165 2026] [security2:error] [pid 4306:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.31.147 (147.31.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:18:19.009165 2026] [security2:error] [pid 4306:tid 4306] [client 34.159.31.147:52664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cbmanufacturing.com"] [uri "/.git/config"] [unique_id "avaBe5AvhM8MsE7x4xQNWQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-11-13 03:14:56
UTC ·
(6 hours ago)
Blocked by ConnMonitor
Web App Attack
🇳🇱
Savvii
2026-11-13 02:51:31
UTC ·
(7 hours ago)
20 attempts against mh-misbehave-ban on pf221105
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
AWW-Admin
2026-11-13 01:46:27
UTC ·
(8 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.159.31.147 (DE/Germany/147.31.159.34.bc.googleusercontent.com)
SQL Injection
🇳🇱
Site.eu
2026-11-13 00:31:08
UTC ·
(9 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
2026-11-12 23:47:31
UTC ·
(10 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-11-12 23:04:55
UTC ·
(10 hours ago)
Multiple WAF Violations
Web App Attack
🇮🇹
VHosting
2026-11-12 21:55:05
UTC ·
(12 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
dot.mg
2026-11-12 21:14:20
UTC ·
(12 hours ago)
Scan of vulnerable files
Web App Attack
