🇺🇸
TPI-Abuse
2026-09-03 04:02:58
(58 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.32.24.95 (95.24.32.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.24.95 (95.24.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 00:02:52.688672 2026] [security2:error] [pid 3323:tid 3323] [client 34.32.24.95:38270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lakesidedigital.com"] [uri "/.git/config"] [unique_id "apjxbIauENDLnaaNqcyeqwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Viveronese
2026-09-03 03:11:04
(1 hour ago)
HTTP vulnerability scanning
Web App Attack
🇺🇸
dtorrer
2026-09-03 02:39:42
(2 hours ago)
General vulnerability scan.
Port Scan
🇬🇧
Apache
2026-09-03 02:09:57
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.32.24.95 (DE/Germany/95.24.32.34.bc.googleus ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.24.95 (DE/Germany/95.24.32.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇩🇪
ghostwarriors
2026-09-02 23:20:08
(5 hours ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-09-02 23:09:05
(5 hours ago)
2026/09/03 01:09:04 [error] 45746#101826: *2095621 access forbidden by rule, client: 34.32.24.95, se ...
show more
2026/09/03 01:09:04 [error] 45746#101826: *2095621 access forbidden by rule, client: 34.32.24.95, server: mail.ksol.io, request: "GET /config/.env HTTP/1.1", host: "mail.ksol.io"
...
show less
Web Spam
🇫🇷
SpaceHost-Server
2026-09-02 22:22:36
(6 hours ago)
Brute-Force
Web App Attack
🇪🇸
alferez
2026-09-02 22:08:11
(6 hours ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
🇺🇸
kosada.com
2026-09-02 20:54:13
(8 hours ago)
Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla ...
show more
Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36")
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 20:34:17
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.32.24.95 (95.24.32.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.24.95 (95.24.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 16:34:10.051892 2026] [security2:error] [pid 30968:tid 30968] [client 34.32.24.95:43200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kooroshvaziri.com"] [uri "/.git/config"] [unique_id "apiIQmY37TsU7FGB1VnM6AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-09-02 18:47:43
(10 hours ago)
LF_APACHE_403: 34.32.24.95 (DE/Germany/95.24.32.34.bc.googleusercontent.com), more than 10 Apache 40 ...
show more
LF_APACHE_403: 34.32.24.95 (DE/Germany/95.24.32.34.bc.googleusercontent.com), more than 10 Apache 403 hits in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 18:05:12
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.32.24.95 (95.24.32.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.24.95 (95.24.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 14:05:07.519292 2026] [security2:error] [pid 16498:tid 16498] [client 34.32.24.95:48104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kleens-uk.com"] [uri "/.git/config"] [unique_id "aphlUx3_5S2fRDKEhk0QggAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-09-02 18:00:49
(11 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-02 18:00:16
(11 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
2026-09-01 23:55:46
(1 day ago)
Fail2Ban triggered
Web App Attack