🇺🇸
TPI-Abuse
2026-11-15 20:17:12
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 15:17:06.336758 2026] [security2:error] [pid 13796:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 15:17:06.336758 2026] [security2:error] [pid 13796:tid 13796] [client 34.175.144.166:35290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.wwtransform.org"] [uri "/.git/config"] [unique_id "avoTQvrrjtN8-IUOBjVTdAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 14:29:44
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 09:29:37.788261 2026] [security2:error] [pid 12384:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 09:29:37.788261 2026] [security2:error] [pid 12384:tid 12384] [client 34.175.144.166:46230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.wa211.org"] [uri "/.git/config"] [unique_id "avnB0TTK51vEXyyYx_RrzwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-11-15 13:45:54
UTC ·
(8 hours ago)
[SunNov1514:45:49.7451782026][security2:error][pid1356560:tid1356787][client34.175.144.166:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htac ...
show more
[SunNov1514:45:49.7451782026][security2:error][pid1356560:tid1356787][client34.175.144.166:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcalendars.vulcanoricambi.ch\"][uri\"/.env.bak\"][unique_id\"avm3jd43PIvHHLRhFxBiMQAAAAE\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 10:47:27
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:47:22.631223 2026] [security2:error] [pid 23353:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:47:22.631223 2026] [security2:error] [pid 23353:tid 23353] [client 34.175.144.166:40744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vidacellenlaweb.com"] [uri "/.git/config"] [unique_id "avmNupsTggNlu4ySIZC7awAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 10:03:50
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:03:44.014308 2026] [security2:error] [pid 22223:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:03:44.014308 2026] [security2:error] [pid 22223:tid 22223] [client 34.175.144.166:34662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vespaitaliancafe.com"] [uri "/.git/config"] [unique_id "avmDgPnLLS-bC6Vp91oqzgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 09:35:09
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:35:04.379371 2026] [security2:error] [pid 2453852: ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:35:04.379371 2026] [security2:error] [pid 2453852:tid 2453852] [client 34.175.144.166:36948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vegasweddingvacation.com"] [uri "/.git/config"] [unique_id "avl8yFEeCUWX8XsFHrdMLgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 06:15:49
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 01:15:43.968598 2026] [security2:error] [pid 12294:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 01:15:43.968598 2026] [security2:error] [pid 12294:tid 12294] [client 34.175.144.166:52294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.unwaved.com"] [uri "/.git/config"] [unique_id "avlODzlh-SVabrWlmS-ZGwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 00:11:30
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 19:11:25.270789 2026] [security2:error] [pid 21762:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 19:11:25.270789 2026] [security2:error] [pid 21762:tid 21762] [client 34.175.144.166:51350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tranquilitybase.network"] [uri "/.git/config"] [unique_id "avj4rUcB_CNODqncejXz0wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
consti.art
2026-11-14 11:23:30
UTC ·
(1 day ago)
Exploit attempts targeting CVE-2025-55182 (3 requests)
Web vulnerability scanning (247 probes), looking for exposed version control folders, configuration and credential files, backup and database dump files
User-Agent: Mozilla/5.0 (Macintosh; Intel ...
show more
Exploit attempts targeting CVE-2025-55182 (3 requests)
Web vulnerability scanning (247 probes), looking for exposed version control folders, configuration and credential files, backup and database dump files
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
251 HTTP requests between 2026-11-14 11:22 and 11:23 UTC
show less
Hacking
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-14 10:27:42
UTC ·
(1 day ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.175.144.166 - - [14/Nov/2026:11:27:23 +0100] "GET /.git/config HTTP/1.1" 301 608 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.175.144.166 - - [14/Nov/2026:11:27:23 +0100] "GET /.git/config HTTP/1.1" 301 608 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-11-14 09:29:32
UTC ·
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-11-13 17:35:03
UTC ·
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-13 17:21:23
UTC ·
(2 days ago)
[ti-hosboov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.175.144.166 - - \[13/Nov/2026:18:21:13 +0100\] "GET /.git/config HTTP/1.1" 301 642 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHT ...
show more
[ti-hosboov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.175.144.166 - - \[13/Nov/2026:18:21:13 +0100\] "GET /.git/config HTTP/1.1" 301 642 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
ManagedStack
2026-11-13 16:58:34
UTC ·
(2 days ago)
Wordpress Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 13:16:46
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:16:42.016572 2026] [security2:error] [pid 6604:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.144.166 (166.144.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:16:42.016572 2026] [security2:error] [pid 6604:tid 6604] [client 34.175.144.166:48570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "humans2humans.org.asfmglobal.com"] [uri "/.git/config"] [unique_id "avW8Ol8KHHL50_m_KK-a8AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
