🇧🇪
cmbplf
2026-11-15 22:28:31
UTC ·
(13 minutes ago)
849 requests with url.path *.env
151 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
🇦🇺
greenhost.com.au
2026-11-15 20:07:29
UTC ·
(2 hours ago)
web application attack (25 malicious requests flagged/blocked by ModSecurity CRS) against 1 server(s) in the last hour. Detected by Wazuh SIEM (automatic report).
Web App Attack
🇳🇱
Savvii
2026-11-15 17:25:33
UTC ·
(5 hours ago)
20 attempts against mh-misbehave-ban on comet
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
easy-job.ai
2026-11-15 16:25:01
UTC ·
(6 hours ago)
Repeated unsolicited sensitive configuration/credential file probing. At least 3 distinct sensitive paths within 60 seconds; requests rejected by the application.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 14:45:34
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 09:45:27.260705 2026] [security2:error] [pid 11216:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 09:45:27.260705 2026] [security2:error] [pid 11216:tid 11216] [client 34.178.20.160:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "easy-byte.net"] [uri "/.git/config"] [unique_id "avnFh1T_28NEPtphmhCPZQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-15 13:10:05
UTC ·
(9 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 12:18:28
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 07:18:20.459929 2026] [security2:error] [pid 15735:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 07:18:20.459929 2026] [security2:error] [pid 15735:tid 15735] [client 34.178.20.160:55630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "easternimport.com"] [uri "/.git/config"] [unique_id "avmjDCMPiZ8guToksiVlXgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 11:14:46
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:14:41.433827 2026] [security2:error] [pid 7639:tid 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:14:41.433827 2026] [security2:error] [pid 7639:tid 7639] [client 34.178.20.160:45508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eastbrooktech.com"] [uri "/.git/config"] [unique_id "avmUIca0Unn5QyXgbX5rtgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 09:05:40
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:05:33.305950 2026] [security2:error] [pid 12057:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:05:33.305950 2026] [security2:error] [pid 12057:tid 12057] [client 34.178.20.160:51976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "earthsdaughters.org"] [uri "/.git/config"] [unique_id "avl13caas6pYZ4I_rxhNNQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
danieljamesbertrand
2026-11-15 08:53:41
UTC ·
(13 hours ago)
fail2ban jail=scanner-permanent on canadapaywall.com (automatic report; categories 19,21)
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-15 08:20:01
UTC ·
(14 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 07:43:56
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 02:43:50.155172 2026] [security2:error] [pid 7473:tid 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 02:43:50.155172 2026] [security2:error] [pid 7473:tid 7473] [client 34.178.20.160:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "earscript.net"] [uri "/.git/config"] [unique_id "avlitqMqqFyysIY_WRFoGgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-15 05:02:04
UTC ·
(17 hours ago)
[osotir.org] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log,/var/log/httpd/domains/ear-books.com.log; samples=/.git/config | /.env | /.env.local
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 04:37:04
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 23:36:59.109952 2026] [security2:error] [pid 23373:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 23:36:59.109952 2026] [security2:error] [pid 23373:tid 23373] [client 34.178.20.160:47804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eantonie.com"] [uri "/.git/config"] [unique_id "avk26zrfcgfULGYEflAMVgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 03:00:11
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 22:00:06.713886 2026] [security2:error] [pid 2052511:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.178.20.160 (160.20.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 22:00:06.713886 2026] [security2:error] [pid 2052511:tid 2052511] [client 34.178.20.160:42758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eaglesnestbandb.com"] [uri "/.git/config"] [unique_id "avkgNhjQcBP4QzsZt8ObYQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack