🇺🇸
TPI-Abuse
2026-11-15 12:44:56
UTC ·
(16 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 07:44:53.174921 2026] [security2:error] [pid 19472:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 07:44:53.174921 2026] [security2:error] [pid 19472:tid 19472] [client 34.174.37.216:44684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.abdulhameeds.art"] [uri "/.git/config"] [unique_id "avmpRZ6BgC2X9RpiifoD7gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 11:54:24
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:54:17.544245 2026] [security2:error] [pid 16094:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:54:17.544245 2026] [security2:error] [pid 16094:tid 16094] [client 34.174.37.216:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.785insulation.com"] [uri "/.git/config"] [unique_id "avmdaZejzfAanmQaHiAApAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 10:25:29
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:25:21.456561 2026] [security2:error] [pid 16367:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:25:21.456561 2026] [security2:error] [pid 16367:tid 16367] [client 34.174.37.216:48592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.179vfs.com"] [uri "/.git/config"] [unique_id "avmIkVux0YxwQQnHZSqNGwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-11-15 09:53:58
UTC ·
(3 hours ago)
Multiple WAF Violations
Web App Attack
🇩🇪
BlueWire Hosting
2026-11-15 08:08:53
UTC ·
(4 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇵🇱
mscode.pl
2026-11-15 07:16:02
UTC ·
(5 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Zone: cp.mscode.pl
Endpoint: /administrator/phpinfo.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/53 ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Zone: cp.mscode.pl
Endpoint: /administrator/phpinfo.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Bad Web Bot
🇩🇪
Callum
2026-11-15 06:49:41
UTC ·
(6 hours ago)
probing for exposed files and admin pages: 238 attempts within 1 minutes, seen by web server log
Web App Attack
2026-11-15 06:01:42
UTC ·
(6 hours ago)
Aggressive web scan
Bad Web Bot
Web App Attack
2026-11-15 05:38:04
UTC ·
(7 hours ago)
Bot / scanning and/or hacking attempts: GET /.env.bak HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.development HTTP/1.1, GET /.env.test HTTP/1.1, GET /.git/config HTTP/1.1, GET /. ...
show more
Bot / scanning and/or hacking attempts: GET /.env.bak HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.development HTTP/1.1, GET /.env.test HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env.local HTTP/1.1, POST / HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.env.production HTTP/1.1
show less
Hacking
Web App Attack
🇫🇷
COMAITE
2026-11-15 05:32:48
UTC ·
(7 hours ago)
Suspicious URL access.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 03:14:54
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 22:14:50.644706 2026] [security2:error] [pid 7922:tid 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 22:14:50.644706 2026] [security2:error] [pid 7922:tid 7922] [client 34.174.37.216:58842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coyotebytes.net"] [uri "/.git/config"] [unique_id "avkjquNlySwEwCnHZAr85QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-15 02:20:01
UTC ·
(10 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 01:33:15
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:33:08.398583 2026] [security2:error] [pid 25559:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:33:08.398583 2026] [security2:error] [pid 25559:tid 25559] [client 34.174.37.216:58474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cowetaappliance.com"] [uri "/.git/config"] [unique_id "avkL1Fy2WhtyyzaHgX25bwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 01:11:57
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:11:53.726723 2026] [security2:error] [pid 1949555:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:11:53.726723 2026] [security2:error] [pid 1949555:tid 1949555] [client 34.174.37.216:58768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cowboyholidaycards.com"] [uri "/.git/config"] [unique_id "avkG2UOf5kNj661mVTWEbQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 23:45:26
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:45:21.599120 2026] [security2:error] [pid 23829:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.37.216 (216.37.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:45:21.599120 2026] [security2:error] [pid 23829:tid 23829] [client 34.174.37.216:39526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coveyhillenterprises.com"] [uri "/.git/config"] [unique_id "avjykak5jSFi41d3zYiVOQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
