๐บ๐ธ
TPI-Abuse
2026-09-28 20:06:46
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:06:41.381831 2026] [security2:error] [pid 372:tid 372] [client 34.22.161.146:54194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "itecsis.com"] [uri "/.git/config"] [unique_id "arrI0fbLAJtehFGrYH6iRwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-09-28 20:03:33
(8 hours ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-09-28 20:02:11
(8 hours ago)
Banned by Fail2Ban on server
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 13:30:47
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 09:30:41.727515 2026] [security2:error] [pid 1124:tid 1124] [client 34.22.161.146:36658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emilyormen.com"] [uri "/.git/config"] [unique_id "arpsActYNDFoYF9Q07VHVQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 15:43:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 11:42:59.808407 2026] [security2:error] [pid 15033:tid 15033] [client 34.22.161.146:53790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chaseallgoodhtmlclasswork.com"] [uri "/.git/config"] [unique_id "ark5g3cp7indR4fInWbhXQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 14:36:56
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 10:36:50.481695 2026] [security2:error] [pid 13190:tid 13206] [client 34.22.161.146:55322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "charteredfinancialmanager.com"] [uri "/.git/config"] [unique_id "arkqAitNY2oK39oZIn-BNAAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-27 03:32:06
(2 days ago)
Scan for .env Files at 2026-09-27T03:32:06+00:00
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 15:23:34
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:23:27.466467 2026] [security2:error] [pid 29481:tid 29481] [client 34.22.161.146:55474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.vjrott.com"] [uri "/.git/config"] [unique_id "arfjb5hve8afVC6DIcQ8wAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
mrcrassi
2026-09-26 07:43:10
(2 days ago)
Triggered Cloudflare WAF (firewallManaged) from BE.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST met ...
show more
Triggered Cloudflare WAF (firewallManaged) from BE.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-24 18:06:05
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:05:59.615254 2026] [security2:error] [pid 21370:tid 21370] [client 34.22.161.146:36712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.boens.org"] [uri "/.git/config"] [unique_id "arVmh3RULmQc9mmU5H-fQgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 17:31:42
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.161.146 (146.161.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:31:36.174616 2026] [security2:error] [pid 4381:tid 4381] [client 34.22.161.146:56882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.blosoms.org"] [uri "/.git/config"] [unique_id "arVeeCCNS-WkdepQwO1yrwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
โจ
2026-09-24 02:17:17
(5 days ago)
Domain : cantinagoccia.com
Rule : env
2026-09-24 02:15:16 217.194.212.123 GET /.env.local - 443 - 34 ...
show more
Domain : cantinagoccia.com
Rule : env
2026-09-24 02:15:16 217.194.212.123 GET /.env.local - 443 - 34.22.161.146 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - cantinagoccia.com 404 0 0 14055 284 140 - -
show less
Hacking
SQL Injection
Anonymous
2026-09-23 02:00:41
(6 days ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
๐ช๐ธ
robotstxt
2026-09-22 10:21:09
(6 days ago)
34.22.161.146 - - [22/Sep/2026:10:20:43 +0000] "GET /.env HTTP/1.1" 403 31 "-" rt="0.381" "Mozilla/5 ...
show more
34.22.161.146 - - [22/Sep/2026:10:20:43 +0000] "GET /.env HTTP/1.1" 403 31 "-" rt="0.381" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" h="ceigram.upm.es" sn="ceigram.upm.es" ru="/.env" u="/index.php" ucs="-" ua="unix:/var/run/php/ceigramupm82.sock" us="301" uct="0.000" urt="0.381"
34.22.161.146 - - [22/Sep/2026:10:20:44 +0000] "GET /.env.local HTTP/1.1" 403 23066 "-" rt="0.579" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" h="ceigram.upm.es" sn="ceigram.upm.es" ru="/.env.local" u="/index.php" ucs="-" ua="unix:/var/run/php/ceigramupm82.sock" us="404" uct="0.000" urt="0.579"
34.22.161.146 - - [22/Sep/2026:10:20:45 +0000] "GET /.env.production HTTP/1.1" 403 23071 "-" rt="0.596" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" h="ceigram.upm.es" sn="ceigram.upm.es" ru="/.env.production" u="/index.php" ucs="-"
...
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-21 23:57:36
(1 week ago)
[livebd] Web exploit scanning: 6 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[livebd] Web exploit scanning: 6 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.22.161.146 - - [22/Sep/2026:01:57:35 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.161.146 - - [22/Sep/2026:01:57:35 +0200] "GET /.env HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.161.146 - - [22/Sep/2026:01:57:35 +0200] "GET /.env.local HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.161.146 - - [22/Sep/2026:01:57:35 +0200] "GET /.env.production HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537
...
show less
Bad Web Bot
Web App Attack