🇺🇸
TPI-Abuse
2026-11-08 17:09:39
UTC ·
(7 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.181.226.61 (61.226.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:09:33.393947 2026] [security2:error] [pid 6852:tid 6 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.181.226.61 (61.226.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:09:33.393947 2026] [security2:error] [pid 6852:tid 6852] [client 34.181.226.61:57100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krewt.com"] [uri "/.git/config"] [unique_id "avCszWmq_hFfKoyE_lKaywAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-11-08 16:45:49
UTC ·
(30 minutes ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 2 domain(s) in 0s
Web App Attack
🇨🇦
Anytech
2026-11-08 16:44:43
UTC ·
(32 minutes ago)
Blocked by ConnMonitor
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:43:27
UTC ·
(33 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.181.226.61 (61.226.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:43:20.383622 2026] [security2:error] [pid 26328:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.181.226.61 (61.226.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:43:20.383622 2026] [security2:error] [pid 26328:tid 26328] [client 34.181.226.61:46324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kporterdesign.com"] [uri "/.git/config"] [unique_id "avCmqEn69ZrBn1KGDsVZQAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-08 16:26:22
UTC ·
(50 minutes ago)
Try to access /.git/config
Web App Attack
🇳🇱
ipoac.nl
2026-11-08 16:26:10
UTC ·
(50 minutes ago)
-:443 34.181.226.61 - - [08/Nov/2026:17:26:09 +0100] - "GET /.git/config HTTP/1.1" 403 6357 "-" "-"
Bad Web Bot
🇺🇸
francelink.fr
2026-11-08 16:25:24
UTC ·
(51 minutes ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-08T16:22:47.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:20:14
UTC ·
(56 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.181.226.61 (61.226.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:20:04.040093 2026] [security2:error] [pid 20088:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.181.226.61 (61.226.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:20:04.040093 2026] [security2:error] [pid 20088:tid 20088] [client 34.181.226.61:56574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kontikimotorcycles.com"] [uri "/.git/config"] [unique_id "avChNIgIo0fWtqPTw6RkLgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
mail.avx.gr
2026-11-08 16:19:34
UTC ·
(57 minutes ago)
plesk-rapid-ban sensitive-file-probe host=konteeust.paladin.gr
Hacking
🇫🇷
j-tap
2026-11-08 16:15:43
UTC ·
(1 hour ago)
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack
Anonymous
2026-11-08 16:10:05
UTC ·
(1 hour ago)
GET /.git/config HTTP/1.1
...
Web App Attack
🇺🇸
mnsf
2026-11-08 16:05:04
UTC ·
(1 hour ago)
Abuse Detected (17)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:03:36
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.181.226.61 (61.226.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:03:29.411929 2026] [security2:error] [pid 14639:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.181.226.61 (61.226.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:03:29.411929 2026] [security2:error] [pid 14639:tid 14639] [client 34.181.226.61:33612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kompareiq.com"] [uri "/.git/config"] [unique_id "avCdUbc9DQCmXe_x-ai8EAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-08 15:52:44
UTC ·
(1 hour ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇸🇪
SkyDancer
2026-11-08 15:50:13
UTC ·
(1 hour ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
Hacking
Brute-Force
SSH