๐บ๐ธ
TPI-Abuse
2026-09-24 18:36:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.38.186.123 (123.186.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.186.123 (123.186.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:36:13.069282 2026] [security2:error] [pid 15489:tid 15489] [client 34.38.186.123:60928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.radicalchange.org"] [uri "/.git/config"] [unique_id "arVtnW3i9-N9V6rVEsnpggAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 17:44:02
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.38.186.123 (123.186.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.186.123 (123.186.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:43:57.939340 2026] [security2:error] [pid 421:tid 421] [client 34.38.186.123:57144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.quantumacceleration.org"] [uri "/.git/config"] [unique_id "arVhXYL-LOIga63dZKnVnwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 17:28:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.38.186.123 (123.186.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.186.123 (123.186.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:28:02.714591 2026] [security2:error] [pid 24115:tid 24115] [client 34.38.186.123:42236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.qovintheloop.org"] [uri "/.git/config"] [unique_id "arVdossl-YPssSoMH-ZNLwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Zundapper
2026-09-24 04:10:49
(2 days ago)
34.38.186.123 - - [24/Sep/2026:06:10:48 +0200] "GET /phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Win ...
show more
34.38.186.123 - - [24/Sep/2026:06:10:48 +0200] "GET /phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.38.186.123 - - [24/Sep/2026:06:10:48 +0200] "GET /info HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.38.186.123 - - [24/Sep/2026:06:10:48 +0200] "GET /_profiler/phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.38.186.123 - - [24/Sep/2026:06:10:48 +0200] "GET /_environment HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.38.186.123 - - [24/Sep/2026:06:10:48 +0200] "GET /webroot/index.php/_environment HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0
...
show less
Web App Attack
Port Scan
๐ง๐ช
cmbplf
2026-09-24 01:42:06
(2 days ago)
804 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
๐ธ๐ช
vaia.cloud
2026-09-24 01:40:02
(2 days ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-22 10:20:01
(4 days ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-09-21 22:23:01
(4 days ago)
34.38.186.123 - - [21/Sep/2026:22:21:57 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh ...
show more
34.38.186.123 - - [21/Sep/2026:22:21:57 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.38.186.123"
34.38.186.123 - - [21/Sep/2026:22:21:57 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.38.186.123"
34.38.186.123 - - [21/Sep/2026:22:21:57 +0000] "GET /.git/config HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.38.186.123"
34.38.186.123 - - [21/Sep/2026:22:21:57 +0000] "GET /.env HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.38.186.123"
34.38.186.123 - - [21/Sep/2026:22:21:57 +0000] "GET /.env.local HTTP/1.1" 403 208 "-" "Mozilla/5.0
...
show less
Web App Attack
๐ฆ๐บ
electronico
2026-09-20 22:23:42
(5 days ago)
34.38.186.123 - - [21/Sep/2026:09:23:37 +1100] "GET /.git/config HTTP/1.1" 404 2104 "-" "Mozilla/5.0 ...
show more
34.38.186.123 - - [21/Sep/2026:09:23:37 +1100] "GET /.git/config HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.38.186.123 - - [21/Sep/2026:09:23:38 +1100] "GET /.env HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.38.186.123 - - [21/Sep/2026:09:23:38 +1100] "GET /.env.local HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.38.186.123 - - [21/Sep/2026:09:23:39 +1100] "GET /.env.production HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.38.186.123 - - [21/Sep/2026:09:23:39 +1100] "GET /.env.staging HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Ge
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 21:24:02
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.186.123 (123.186.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.186.123 (123.186.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 17:23:55.359825 2026] [security2:error] [pid 17789:tid 17789] [client 34.38.186.123:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "electronica.luisgtechgroup.com"] [uri "/.git/config"] [unique_id "arBO67yJoaBjwoqonOVsXgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 20:17:21
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.186.123 (123.186.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.186.123 (123.186.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 16:17:18.869206 2026] [security2:error] [pid 25483:tid 25483] [client 34.38.186.123:39350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "electrolux.pamplonaserviciotecnico.com"] [uri "/.git/config"] [unique_id "arA_TjoGeVEO527Y1RDvUQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-20 14:35:03
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack