🇺🇸
TPI-Abuse
2026-09-16 12:56:43
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.19.169.28 (28.169.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.169.28 (28.169.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:56:37.130495 2026] [security2:error] [pid 15300:tid 15311] [client 34.19.169.28:42870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kiehnefamily.us"] [uri "/.git/config"] [unique_id "aqqSBQv1cVZ423rw7e54kAAAAYk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
wpadm4
2026-09-16 12:31:35
(1 hour ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
Site.eu
2026-09-16 11:14:06
(3 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-16 09:48:19
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.169.28 (28.169.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.169.28 (28.169.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 05:48:15.619866 2026] [security2:error] [pid 24824:tid 24824] [client 34.19.169.28:50762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kountz.org"] [uri "/.git/config"] [unique_id "aqpl3yRm5L9aD32Ei52XpQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dot.mg
2026-09-16 09:26:14
(5 hours ago)
Scan of vulnerable files
Web App Attack
🇭🇺
miszterx.hu
2026-09-16 08:44:22
(5 hours ago)
XORP (haproxy): 73x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ip ...
show more
XORP (haproxy): 73x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 08:43:52
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.169.28 (28.169.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.169.28 (28.169.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 04:43:48.328574 2026] [security2:error] [pid 24091:tid 24228] [client 34.19.169.28:46546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koublacat.com"] [uri "/.git/config"] [unique_id "aqpWxLc7OsNtB9p5gPmZSgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
sernate
2026-09-16 08:21:07
(6 hours ago)
(403blocker) 403 trigger 34.19.169.28 (CA/Canada/28.169.19.34.bc.googleusercontent.com): 80 in the l ...
show more
(403blocker) 403 trigger 34.19.169.28 (CA/Canada/28.169.19.34.bc.googleusercontent.com): 80 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER
show less
Brute-Force
🇩🇪
Tsumugi Kotobuki
2026-09-16 07:36:23
(6 hours ago)
8x Web Scan (L7) | Paths: /service-account.json, /sa.json, /google-key.json, /google-credentials.jso ...
show more
8x Web Scan (L7) | Paths: /service-account.json, /sa.json, /google-key.json, /google-credentials.json, /gcp-sa.json | Codes: 200(8x) | rDNS: 28.169.19.34.bc.googleusercontent.com | F2B/angie-path-trap@2026-09-16T07:36:22Z
show less
Bad Web Bot
Web App Attack
🇫🇮
6kilowatti
2026-09-16 06:57:44
(7 hours ago)
[16/Sep/2026:06:57:42 +0000] - 403 403 - GET https koti.6kw.fi "/.git/config" [Client 34.19.169.28] ...
show more
[16/Sep/2026:06:57:42 +0000] - 403 403 - GET https koti.6kw.fi "/.git/config" [Client 34.19.169.28] [Length 186] [Gzip -] [Sent-to 10.144.0.13] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[16/Sep/2026:06:57:42 +0000] - 403 403 - GET https koti.6kw.fi "/.env" [Client 34.19.169.28] [Length 186] [Gzip -] [Sent-to 10.144.0.13] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[16/Sep/2026:06:57:42 +0000] - 403 403 - GET https koti.6kw.fi "/.env.local" [Client 34.19.169.28] [Length 186] [Gzip -] [Sent-to 10.144.0.13] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[16/Sep/2026:06:57:43 +0000] - 403 403 - GET https koti.6kw.fi "/.env.production" [Client 34.19.169.28] [Length 186] [Gzip -] [Sent-to 10.144.0.13] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
...
show less
Web App Attack
🇳🇴
jad-abuse
2026-09-16 06:33:46
(7 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup. Observed by 1 sensor(s); 92 hits.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 05:35:37
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.169.28 (28.169.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.169.28 (28.169.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 01:35:34.101268 2026] [security2:error] [pid 29615:tid 29615] [client 34.19.169.28:55350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koswerks.net"] [uri "/.git/config"] [unique_id "aqoqpr851Pp5AIce_BunrQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-16 04:52:15
(9 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
2026-09-16 04:30:42
(10 hours ago)
[ssd5.kdns.gr] httpd-config-scan: sites=www.kostaspriftis.gr; logs=/var/log/httpd/domains/kostasprif ...
show more
[ssd5.kdns.gr] httpd-config-scan: sites=www.kostaspriftis.gr; logs=/var/log/httpd/domains/kostaspriftis.gr.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
🇳🇱
Savvii
2026-09-16 03:22:18
(11 hours ago)
377 attempts against mh-misbehave-ban on bean
Brute-Force
Bad Web Bot
Web App Attack