🇺🇸
TPI-Abuse
2026-06-15 05:22:24
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.174.30.164 (164.30.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:22:17.443813 2026] [security2:error] [pid 29517:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.30.164 (164.30.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:22:17.443813 2026] [security2:error] [pid 29517:tid 29529] [client 34.174.30.164:40288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "managementconsultant.us"] [uri "/frontend/.git/config"] [unique_id "ai-MCXIS9EALsNu_ffy73AAAAUg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
OptimusGO
2026-06-15 04:05:23
UTC ·
(5 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-06-15 05:05:23 UTC
Log evidence:
06/15/2026-05:05:22.606104 [wDrop] [**] [1:7000500:1] FINSERV CRITICAL: Aggressive Port Scan [**] [Cla ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-06-15 05:05:23 UTC
Log evidence:
06/15/2026-05:05:22.606104 [wDrop] [**] [1:7000500:1] FINSERV CRITICAL: Aggressive Port Scan [**] [Classification: Attempted Information Leak] [Priority: 2] {TCP} 34.174.30.164:39464 -> 185.127.18.66:443
06/15/2026-05:05:22.606104 [**] [1:9000060:2] AUTONOMOUS Long-term Reconnaissance [**] [Classification: (null)] [Priority: 2] {TCP} 34.174.30.164:39464 -> 185.127.18.66:443
show less
Port Scan
Brute-Force
🇧🇪
cmbplf
2026-06-15 03:59:35
UTC ·
(5 months ago)
13.200 requests from abuseipdb.com blacklisted IP (8mos3w9h)
Brute-Force
Bad Web Bot
🇬🇧
consul.to
2026-06-15 02:37:02
UTC ·
(5 months ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
masterguru
2026-06-15 00:18:20
UTC ·
(5 months ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 00:06:02
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.174.30.164 (164.30.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:05:57.635082 2026] [security2:error] [pid 28972:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.30.164 (164.30.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:05:57.635082 2026] [security2:error] [pid 28972:tid 28972] [client 34.174.30.164:41396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "printorganic.com"] [uri "/v2/.git/config"] [unique_id "ai9B5cOyYx8EWqjZ6WFLYAAAADc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 23:49:28
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.174.30.164 (164.30.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:49:24.462473 2026] [security2:error] [pid 23590:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.30.164 (164.30.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:49:24.462473 2026] [security2:error] [pid 23590:tid 23590] [client 34.174.30.164:54578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "red-jacket.com"] [uri "/app/.git/config"] [unique_id "ai8-BK3AZ3BuOAOu4z8beQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-14 23:15:46
UTC ·
(5 months ago)
(modsecurity) srv201 ModSecurity 34.174.30.164 (164.30.174.34.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 22:55:07
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.174.30.164 (164.30.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:55:01.338043 2026] [security2:error] [pid 26480:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.30.164 (164.30.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:55:01.338043 2026] [security2:error] [pid 26480:tid 26480] [client 34.174.30.164:53128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.workzoap.com.worldchat.global"] [uri "/.git/config"] [unique_id "ai8xRUdbmR8sDLcRWovmDwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-14 22:04:28
UTC ·
(5 months ago)
Auto-ban: >3000 req/min op 2026-06-14
Web App Attack
SSH
Hacking
🇺🇸
Charlesiv
2026-06-14 22:00:20
UTC ·
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /admin/.git/config
Timestamp: 2026-06-14T21:44:55Z
Ray ID: a0bc84dfcc4fb52d
UA: Mozilla/5.0 (X11; Ubuntu; Linux ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /admin/.git/config
Timestamp: 2026-06-14T21:44:55Z
Ray ID: a0bc84dfcc4fb52d
UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:20.0) Gecko/20100101 Firefox/20.0
show less
Bad Web Bot
Anonymous
2026-06-14 21:10:02
UTC ·
(5 months ago)
suspicious request in access.log
Web App Attack
Anonymous
2026-06-14 13:49:48
UTC ·
(5 months ago)
Brute-Force reported by Fail2Ban
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-06-14 13:06:16
UTC ·
(5 months ago)
Multiple WAF Violations
Web App Attack
🇮🇹
mediarama.com
2026-06-14 11:06:43
UTC ·
(5 months ago)
Banned by Fail2Ban
Web App Attack