๐บ๐ธ
TPI-Abuse
2026-09-01 13:27:34
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.21.169.92 (92.169.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.169.92 (92.169.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:27:28.492817 2026] [security2:error] [pid 16415:tid 16415] [client 34.21.169.92:39492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jogmabogadospenalistas.com"] [uri "/.git/config"] [unique_id "apbSwAR2h0gMfCGQQlvJTAAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 11:59:17
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.21.169.92 (92.169.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.169.92 (92.169.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:59:10.757633 2026] [security2:error] [pid 22414:tid 22414] [client 34.21.169.92:52076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joesteiner.com"] [uri "/.git/config"] [unique_id "apa-DuWAw-viY-CbxwKjZQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
masterguru
2026-09-01 11:55:49
(9 hours ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-01 11:02:32
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.21.169.92 (92.169.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.169.92 (92.169.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:02:28.532120 2026] [security2:error] [pid 24569:tid 24569] [client 34.21.169.92:43046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joelyaucom.studioyau.com"] [uri "/.git/config"] [unique_id "apawxOASdMWO4h3ondJIVAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 09:26:11
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.21.169.92 (92.169.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.169.92 (92.169.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:26:07.470177 2026] [security2:error] [pid 14419:tid 14419] [client 34.21.169.92:57340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joebankx.com"] [uri "/.git/config"] [unique_id "apaaL7oZSOuv5GWbow4E9gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
vmd56152.contaboserver.net
2026-09-01 08:05:26
(13 hours ago)
[Tue Sep 01 10:05:20.454502 2026] [proxy_fcgi:error] [pid 2462592:tid 140326001944320] [client 34.21 ...
show more
[Tue Sep 01 10:05:20.454502 2026] [proxy_fcgi:error] [pid 2462592:tid 140326001944320] [client 34.21.169.92:55844] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:05:20.666488 2026] [proxy_fcgi:error] [pid 2462592:tid 140325892904704] [client 34.21.169.92:55844] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:05:20.878317 2026] [proxy_fcgi:error] [pid 2462592:tid 140325867726592] [client 34.21.169.92:55844] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:05:21.091233 2026] [proxy_fcgi:error] [pid 2462592:tid 140326035515136] [client 34.21.169.92:55844] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:05:21.304142 2026] [proxy_fcgi:error] [pid 2462592:tid 140325876119296] [client 34.21.169.92:55844] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:05:21.517713 2026] [proxy_fcgi:error] [pid 2462592:tid 140326119659264] [client 34.21.169.92:55844] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:05:21.732809 2026] [proxy_fcgi:
...
show less
Brute-Force
๐ง๐ฌ
HighWay
2026-09-01 06:15:23
(15 hours ago)
34.21.169.92 - - [01/Sep/2026:06:14:52 +0000] "GET /service-account.json HTTP/1.1" 404 60973 "-" "Mo ...
show more
34.21.169.92 - - [01/Sep/2026:06:14:52 +0000] "GET /service-account.json HTTP/1.1" 404 60973 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.21.169.92 - - [01/Sep/2026:06:14:54 +0000] "GET /gcp-credentials.json HTTP/1.1" 404 60972 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-01 05:00:03
(16 hours ago)
suspicious request in access.log
Web App Attack
๐ฉ๐ช
FD-IX
2026-09-01 04:29:34
(17 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ซ๐ฎ
paissangroup
2026-09-01 00:49:24
(20 hours ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
ConsulHosting
2026-09-01 00:42:22
(21 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-08-31 17:23:23
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-08-31 16:20:02
(1 day ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
Anonymous
2026-08-31 16:06:27
(1 day ago)
[ns67.kdns.gr] httpd-config-scan: sites=kapaweb.gr,www.kweb.gr; logs=/var/www/vhosts/kapaweb.gr/logs ...
show more
[ns67.kdns.gr] httpd-config-scan: sites=kapaweb.gr,www.kweb.gr; logs=/var/www/vhosts/kapaweb.gr/logs/access_ssl_log,/var/www/vhosts/system/kapaweb.gr/logs/access_ssl_log,/var/www/vhosts/system/kapaweb.gr/logs/proxy_access_ssl_log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
๐ณ๐ฑ
maxxsense
2026-08-31 15:12:03
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.21.169.92 (SG/Singapore/92.169.21.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.21.169.92 (SG/Singapore/92.169.21.34.bc.googleusercontent.com)
show less
SQL Injection