🇩🇪
4server
2026-11-14 17:11:23
UTC ·
(1 hour ago)
[SatNov1418:11:20.1840162026][security2:error][pid217612:tid217726][client34.17.158.114:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htacces ...
show more
[SatNov1418:11:20.1840162026][security2:error][pid217612:tid217726][client34.17.158.114:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcontacts.kiteinvest.ch\"][uri\"/.env.bak\"][unique_id\"aviWOH1jebZ9A-itJ8AYcwAAAQk\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 16:13:20
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.158.114 (114.158.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:13:13.876680 2026] [security2:error] [pid 13472:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.158.114 (114.158.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:13:13.876680 2026] [security2:error] [pid 13472:tid 13472] [client 34.17.158.114:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kidswithcamerasmovie.com"] [uri "/.git/config"] [unique_id "aviImVkthJQJhSW1mtxwkQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-14 11:47:29
UTC ·
(7 hours ago)
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=25, Diversity=10, CanaryOverride=90.
Web App Attack
Bad Web Bot
🇳🇱
Savvii
2026-11-14 10:37:00
UTC ·
(8 hours ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Hans Renses
2026-11-14 10:14:26
UTC ·
(8 hours ago)
Web app attack: 24 requests for known vulnerable paths (.env, xmlrpc.php, web shells, config backups) within one hour. Reported automatically by BotZoom.
Web App Attack
Hacking
🇲🇾
Rizzy
2026-11-14 09:29:02
UTC ·
(9 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇿🇦
conure.sh
2026-11-14 05:12:01
UTC ·
(13 hours ago)
csagent: score 19.9: secrets grab x2; 1 domain(s) in 1s
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 01:26:30
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.158.114 (114.158.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 20:26:24.419571 2026] [security2:error] [pid 4023:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.158.114 (114.158.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 20:26:24.419571 2026] [security2:error] [pid 4023:tid 4023] [client 34.17.158.114:55706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jackieherbach.com"] [uri "/.git/config"] [unique_id "ave4wEctEOa4mkrHmGqLcQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-13 22:59:27
UTC ·
(19 hours ago)
Auto-ban: >3000 req/min op 2026-11-13
Web App Attack
SSH
Hacking
🇳🇱
Savvii
2026-11-13 17:40:25
UTC ·
(1 day ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-13 17:17:01
UTC ·
(1 day ago)
(web_sensitive_file) srv103 Sensitive file probe (.env/.git/backup) 34.17.158.114 (IT/Italy/114.158.17.34.bc.googleusercontent.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 13:53:33
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.158.114 (114.158.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:53:26.933009 2026] [security2:error] [pid 5532:tid 5 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.158.114 (114.158.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:53:26.933009 2026] [security2:error] [pid 5532:tid 5532] [client 34.17.158.114:32974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.iconbizpromo.com"] [uri "/.git/config"] [unique_id "avcWVsU6jxEdCVVUN44i2gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 11:45:47
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.158.114 (114.158.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:45:40.695939 2026] [security2:error] [pid 23625:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.158.114 (114.158.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:45:40.695939 2026] [security2:error] [pid 23625:tid 23625] [client 34.17.158.114:38146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.hvacs-aircon.com"] [uri "/.git/config"] [unique_id "avb4ZL9BPClwtdBLmoEssgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:48:58
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.158.114 (114.158.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:48:55.466275 2026] [security2:error] [pid 15589:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.158.114 (114.158.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:48:55.466275 2026] [security2:error] [pid 15589:tid 15589] [client 34.17.158.114:54036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.hteca.com"] [uri "/.git/config"] [unique_id "avbrF-UOutlPmm55b0JTsgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 02:10:55
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.158.114 (114.158.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:10:52.188935 2026] [security2:error] [pid 24653:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.158.114 (114.158.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:10:52.188935 2026] [security2:error] [pid 24653:tid 24653] [client 34.17.158.114:41684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.haywardcarpentry.com"] [uri "/.git/config"] [unique_id "avZxrAr_JBXrv03VU8VM2wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
