🇺🇸
TPI-Abuse
2026-09-20 08:35:18
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.176.2.226 (226.2.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.2.226 (226.2.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 04:35:14.852049 2026] [security2:error] [pid 19612:tid 19612] [client 34.176.2.226:57484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "k0cgy.net"] [uri "/.git/config"] [unique_id "aq-awh5enBrrAtN2WFZThAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇹
penguin-solutions.at
2026-09-20 07:34:40
(6 hours ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
🇳🇱
debestelapp
2026-09-15 23:55:21
(4 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 23:30:25
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.176.2.226 (226.2.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.2.226 (226.2.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:30:21.329656 2026] [security2:error] [pid 24492:tid 24492] [client 34.176.2.226:59708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "timcsite.com.woosterclassof64.com"] [uri "/.git/config"] [unique_id "aqnVDZvQ7ItyA9UI3GMUKwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 22:54:20
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.176.2.226 (226.2.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.2.226 (226.2.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:54:15.553959 2026] [security2:error] [pid 32248:tid 32248] [client 34.176.2.226:50416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "timberwolf-construction.com"] [uri "/.git/config"] [unique_id "aqnMlyN0Xyfh35nsl1SoAQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 20:07:56
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.176.2.226 (226.2.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.2.226 (226.2.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:07:52.164065 2026] [security2:error] [pid 5430:tid 5430] [client 34.176.2.226:44402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tiln.org"] [uri "/.git/config"] [unique_id "aqmlmHJNMWG1PKOt9GGJWQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-15 19:27:53
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
Alt255
2026-09-15 15:24:12
(4 days ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.176.2.226 - - [15/Sep/2026:17:23:52 +0200] "GET /.git/config HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-09-15 14:16:20
(5 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇨🇭
Origon
2026-09-15 06:48:20
(5 days ago)
http-sensitive-files - IP: 34.176.2.226 - time="2026-09-15T08:48:20+02:00" level=info msg="(555f66b ...
show more
http-sensitive-files - IP: 34.176.2.226 - time="2026-09-15T08:48:20+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.176.2.226 (CL/396982) : 4h ban on Ip 34.176.2.226" module=db
show less
Web App Attack
🇫🇷
masterguru
2026-09-15 06:41:22
(5 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇮🇹
VHosting
2026-09-15 05:40:05
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇨🇭
Origon
2026-06-29 03:38:30
(2 months ago)
http-sensitive-files - IP: 34.176.2.226 - time="2026-06-29T05:38:29+02:00" level=info msg="(555f66b ...
show more
http-sensitive-files - IP: 34.176.2.226 - time="2026-06-29T05:38:29+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.176.2.226 (CL/396982) : 4h ban on Ip 34.176.2.226" module=db
show less
Web App Attack
🇳🇱
Savvii
2026-06-29 03:08:13
(2 months ago)
30 attempts against mh-modsecurity-ban on neon
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-06-28 23:46:30
(2 months ago)
Multiple WAF Violations
Web App Attack