🇺🇸
TPI-Abuse
2026-10-22 16:41:04
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 12:41:00.051102 2026] [security2:error] [pid 5680:tid 5680] [client 34.165.110.2:41706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.shukrisharawico.com"] [uri "/.git/config"] [unique_id "ato8nOd24OMTGvpi5prsVwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-10-22 13:13:42
(17 hours ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/2.110.165.34.bc.googleusercontent ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/2.110.165.34.bc.googleusercontent.com
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 13:04:51
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 09:04:43.764709 2026] [security2:error] [pid 10394:tid 10394] [client 34.165.110.2:36710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.scottcarper.com"] [uri "/.git/config"] [unique_id "atoJ680FytpPo_TL2_YiQQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-10-22 12:56:33
(18 hours ago)
34.165.110.2 - - [22/Oct/2026:15:56:33 +0300] "GET /.git/config HTTP/1.1" 404 3420 "-" "Mozilla/5.0 ...
show more
34.165.110.2 - - [22/Oct/2026:15:56:33 +0300] "GET /.git/config HTTP/1.1" 404 3420 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.165.110.2 - - [22/Oct/2026:15:56:33 +0300] "GET /.env.local HTTP/1.1" 404 3420 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 09:22:40
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:22:36.111764 2026] [security2:error] [pid 17421:tid 17421] [client 34.165.110.2:41282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.rutledgestaircase.com"] [uri "/.git/config"] [unique_id "atnV3He0HoC-e2uQ6S1u0AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
nazemes
2026-10-22 09:02:16
(22 hours ago)
Honeypot path probe: /.git/config on cdn.misago.com.tr
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-22 08:03:48
(23 hours ago)
Excessive 404/403 errors
Brute-Force
2026-10-22 07:39:31
(23 hours ago)
Aggressive web scan
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 07:32:19
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 03:32:15.376430 2026] [security2:error] [pid 21346:tid 21346] [client 34.165.110.2:41056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ronniescedarinn.com"] [uri "/.git/config"] [unique_id "atm7_61LM5tJH5FxS6XBNAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-10-22 05:50:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 03:02:13
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 23:02:06.381325 2026] [security2:error] [pid 27787:tid 27787] [client 34.165.110.2:37246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.reelfaithpodcast.com"] [uri "/.git/config"] [unique_id "atl8ruBuueWnQ1J6l2h9hgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-21 09:11:31
(1 day ago)
[WedOct2111:11:26.1962472026][security2:error][pid3710947:tid3711018][client34.165.110.2:0]ModSecuri ...
show more
[WedOct2111:11:26.1962472026][security2:error][pid3710947:tid3711018][client34.165.110.2:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcontacts.serban.ch\"][uri\"/.env.bak\"][unique_id\"atiBvg-5scTboPV56f0T2gAAAIY\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 07:52:25
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 03:52:21.259675 2026] [security2:error] [pid 14815:tid 14815] [client 34.165.110.2:38510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.sebog.org"] [uri "/.git/config"] [unique_id "athvNQ_4UwbrG5HwkClJUgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 06:18:24
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 02:18:17.228042 2026] [security2:error] [pid 19687:tid 19687] [client 34.165.110.2:50874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.scc1.us"] [uri "/.git/config"] [unique_id "athZKWUINJBGc-aBKvaIJAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 05:46:16
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.110.2 (2.110.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 01:46:08.824617 2026] [security2:error] [pid 12496:tid 12496] [client 34.165.110.2:35128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.sawted.com"] [uri "/.git/config"] [unique_id "athRoM1MgF30NvlfS7wViAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack