🇺🇸
RonnieGas
2026-11-13 20:02:27
UTC ·
(8 minutes ago)
Automated scanning and API/path probing against a web application (login, API and path enumeration, proxy pool). Blocked by firewall.
Web App Attack
Bad Web Bot
Brute-Force
Hacking
🇩🇪
svr
2026-11-13 17:25:11
UTC ·
(2 hours ago)
Abusive Automated Web Scanner
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 12:41:01
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:40:54.702412 2026] [security2:error] [pid 30807:tid 3080 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:40:54.702412 2026] [security2:error] [pid 30807:tid 30807] [client 34.17.132.2:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.backlogica.com"] [uri "/.git/config"] [unique_id "avcFVjJ-j3i6jNzRLvm-1AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:29:53
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:29:45.027399 2026] [security2:error] [pid 10882:tid 1088 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:29:45.027399 2026] [security2:error] [pid 10882:tid 10882] [client 34.17.132.2:44800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.avaliantlife.com"] [uri "/.git/config"] [unique_id "avbmmVj7Yj2pC19SAbC67gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 08:22:25
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:22:22.643556 2026] [security2:error] [pid 1339:tid 1339] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:22:22.643556 2026] [security2:error] [pid 1339:tid 1339] [client 34.17.132.2:50246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ati.software"] [uri "/.git/config"] [unique_id "avbIvuFncp7DIavRlnyi6wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 07:09:16
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:09:13.189841 2026] [security2:error] [pid 29750:tid 2975 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:09:13.189841 2026] [security2:error] [pid 29750:tid 29750] [client 34.17.132.2:39622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.asiancommoditiescorporation.com"] [uri "/.git/config"] [unique_id "ava3mUHA_6RRUgpF669i1AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 06:53:30
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:53:26.995445 2026] [security2:error] [pid 17362:tid 1736 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:53:26.995445 2026] [security2:error] [pid 17362:tid 17362] [client 34.17.132.2:36624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.asfmglobal.com"] [uri "/.git/config"] [unique_id "avaz5gzTDCbN7mTlt9CXewAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Catalin Negru
2026-11-13 02:28:05
UTC ·
(17 hours ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇨🇭
4server
2026-11-13 02:00:30
UTC ·
(18 hours ago)
[FriNov1303:00:24.3043902026][security2:error][pid88991:tid89077][client34.17.132.2:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][m ...
show more
[FriNov1303:00:24.3043902026][security2:error][pid88991:tid89077][client34.17.132.2:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"cpcontacts.annunci-ticino.ch\"][uri\"/.git/config\"][unique_id\"avZvODo3LQmuk41bGdzyrQAAAMM\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 01:20:45
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 20:20:41.141962 2026] [security2:error] [pid 1193:tid 1193] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 20:20:41.141962 2026] [security2:error] [pid 1193:tid 1193] [client 34.17.132.2:43894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.angelsofrhodeisland.com"] [uri "/.git/config"] [unique_id "avZl6fd8I-dWfK5VZ_Mz8gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-11-13 00:26:08
UTC ·
(19 hours ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 1s
Web App Attack
🇦🇺
rubixstudios
2026-11-12 23:32:02
UTC ·
(20 hours ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇩🇪
4server
2026-11-12 18:21:41
UTC ·
(1 day ago)
[ThuNov1219:21:35.9055532026][security2:error][pid1720185:tid1720335][client34.17.132.2:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htacces ...
show more
[ThuNov1219:21:35.9055532026][security2:error][pid1720185:tid1720335][client34.17.132.2:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcontacts.akastudio.ch\"][uri\"/.env.bak\"][unique_id\"avYDr-6HJvP8MAshe34vcQAAARg\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 17:36:03
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:35:55.273971 2026] [security2:error] [pid 12203:tid 1220 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.132.2 (2.132.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:35:55.273971 2026] [security2:error] [pid 12203:tid 12203] [client 34.17.132.2:42998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.airplanechristmascards.com"] [uri "/.git/config"] [unique_id "avX4-wHgbqChm17KQxtEfwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-12 17:10:04
UTC ·
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
