🇷🇴
gtheo99
2026-09-18 07:49:45
(39 minutes ago)
(mod_security) mod_security (id:900006) triggered by 34.166.206.210 (SA/Saudi Arabia/210.206.166.34. ...
show more
(mod_security) mod_security (id:900006) triggered by 34.166.206.210 (SA/Saudi Arabia/210.206.166.34.bc.googleusercontent.com): 3 in the last 900 secs (CF_ENABLE)
show less
Port Scan
🇺🇸
TPI-Abuse
2026-09-18 06:15:44
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 02:15:39.618390 2026] [security2:error] [pid 32563:tid 32563] [client 34.166.206.210:38072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.technologymoods.com"] [uri "/.git/config"] [unique_id "aqzXC0Kzt6_D5RfJ9lSZzQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-09-17 20:19:09
(12 hours ago)
[ThuSep1722:19:03.0038772026][security2:error][pid2633850:tid2633953][client34.166.206.210:0]ModSecu ...
show more
[ThuSep1722:19:03.0038772026][security2:error][pid2633850:tid2633953][client34.166.206.210:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcalendars.studio-portale.ch\"][uri\"/.env.bak\"][unique_id\"aqxLN0KjwcrATJlO_J7tWQAAAcU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 10:46:26
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:46:23.348793 2026] [security2:error] [pid 21692:tid 21692] [client 34.166.206.210:52082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.soleillavie.com"] [uri "/.git/config"] [unique_id "aqvE_1b1qxnrp5lFwAzeWAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 10:22:33
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:22:29.564340 2026] [security2:error] [pid 31347:tid 31347] [client 34.166.206.210:35906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.softwarezz.net"] [uri "/.git/config"] [unique_id "aqu_ZXdaazXfptRI1rlvRwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 02:27:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:27:32.142244 2026] [security2:error] [pid 2846:tid 2846] [client 34.166.206.210:35312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hometechllc.com"] [uri "/.git/config"] [unique_id "aqtQFGYQnWuTR8fX3xOjxwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-17 02:12:00
(1 day ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
🇩🇪
4server
2026-09-16 19:41:00
(1 day ago)
[WedSep1621:40:56.1766392026][security2:error][pid1151806:tid1151820][client34.166.206.210:0]ModSecu ...
show more
[WedSep1621:40:56.1766392026][security2:error][pid1151806:tid1151820][client34.166.206.210:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpanel.your-team.ch\"][uri\"/.env.bak\"][unique_id\"aqrwyMfvl6TW-Y-oWHUjmwAAAAM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇦🇺
rubixstudios
2026-09-16 14:01:02
(1 day ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 13:16:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:16:03.569320 2026] [security2:error] [pid 19407:tid 19443] [client 34.166.206.210:32784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.priyom.us"] [uri "/.git/config"] [unique_id "aqqWkw_LulmWyAkLxIdreQAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 05:03:42
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 01:03:37.934927 2026] [security2:error] [pid 32203:tid 32203] [client 34.166.206.210:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wiszen.org"] [uri "/.git/config"] [unique_id "aqojKY8CK0ltop_PYuz_BQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 03:06:32
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 23:06:25.396255 2026] [security2:error] [pid 16296:tid 16296] [client 34.166.206.210:47204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.whodatnation.com"] [uri "/.git/config"] [unique_id "aqoHsT3FLotjuFB2OVh0pgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
mondor.ro
2026-09-16 00:26:32
(2 days ago)
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.166.206.210, Reason ...
show more
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.166.206.210, Reason:[(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (SA/Saudi Arabia/210.206.166.34.bc.googleusercontent.com): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
Port Scan
🇺🇸
TPI-Abuse
2026-09-16 00:23:00
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:22:57.073389 2026] [security2:error] [pid 1133:tid 1133] [client 34.166.206.210:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.webuildbeaches.com"] [uri "/.git/config"] [unique_id "aqnhYZZr2O1qzEE7-T-uNAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 21:19:02
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.206.210 (210.206.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:18:55.697813 2026] [security2:error] [pid 25932:tid 25932] [client 34.166.206.210:50702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.walkenfeld.com"] [uri "/.git/config"] [unique_id "aqm2P5Kg9aUqvP41cpyE7AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack