🇺🇸
TPI-Abuse
2026-09-11 18:24:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.174.132.73 (73.132.174.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.132.73 (73.132.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 14:23:53.376130 2026] [security2:error] [pid 26075:tid 26075] [client 34.174.132.73:41482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "denemeblog.osmanbozkurt.com"] [uri "/.git/config"] [unique_id "aqRHOYdKjz0kGPYPSDKDcAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 16:42:02
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.174.132.73 (73.132.174.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.132.73 (73.132.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 12:41:53.608146 2026] [security2:error] [pid 509:tid 509] [client 34.174.132.73:42376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "den-daas.com"] [uri "/.git/config"] [unique_id "aqQvUWKRoJtHhD05KoB27wAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-11 14:20:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
ghostwarriors
2026-09-11 13:20:06
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-09-11 13:05:22
(1 day ago)
34.174.132.73 - - [11/Sep/2026:15:05:16 +0200] "POST / HTTP/1.1" 302 582 "-" "Mozilla/5.0 (X11; Linu ...
show more
34.174.132.73 - - [11/Sep/2026:15:05:16 +0200] "POST / HTTP/1.1" 302 582 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.132.73 - - [11/Sep/2026:15:05:17 +0200] "GET /.env HTTP/1.1" 404 511 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.132.73 - - [11/Sep/2026:15:05:17 +0200] "GET /.env.local HTTP/1.1" 404 511 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.132.73 - - [11/Sep/2026:15:05:17 +0200] "GET /.env.production HTTP/1.1" 404 511 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.132.73 - - [11/Sep/2026:15:05:17 +0200] "GET /.env.staging HTTP/1.1" 404 511 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.132.73 - - [11/Sep/2026:15:05:17 +0200] "GET /.env.
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-11 12:38:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.174.132.73 (73.132.174.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.132.73 (73.132.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 08:38:10.268760 2026] [security2:error] [pid 14893:tid 14893] [client 34.174.132.73:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "demondomain.com"] [uri "/.git/config"] [unique_id "aqP2MpEpf77qnvt-yxsj8QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-11 12:37:13
(1 day ago)
281 requests with url.path *credentials.json
103 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇳🇱
debestelapp
2026-09-11 10:35:13
(1 day ago)
Web App Attack
🇳🇱
Webhoster
2026-09-11 05:50:01
(1 day ago)
CrowdSec detected crowdsecurity/http-sensitive-files on a monitored service.
Web App Attack
Anonymous
2026-09-11 05:35:18
(1 day ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇳🇱
Site.eu
2026-09-11 04:37:01
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
LRob
2026-09-10 11:12:06
(2 days ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config | 2026-09-10 11:12 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 09:06:31
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.174.132.73 (73.132.174.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.132.73 (73.132.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 05:06:25.100632 2026] [security2:error] [pid 22371:tid 22371] [client 34.174.132.73:52864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dshgraphics.com"] [uri "/.git/config"] [unique_id "aqJzEQcovLNrAU9pHNKxWgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-10 07:28:12
(2 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
Lea
2026-09-10 07:01:26
(2 days ago)
Malicious web probe detected on bearstool.com: 34.174.132.73 - - [10/Sep/2026:03:01:25 -0400] "GET / ...
show more
Malicious web probe detected on bearstool.com: 34.174.132.73 - - [10/Sep/2026:03:01:25 -0400] "GET /.git/config HTTP/2.0" 404 935 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack