🇺🇸
TPI-Abuse
2026-09-03 07:48:30
(5 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.48.201.208 (208.201.48.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.201.208 (208.201.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 03:48:24.702712 2026] [security2:error] [pid 1605051:tid 1605117] [client 34.48.201.208:34232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ozworkshop.com"] [uri "/.git/config"] [unique_id "apkmSBCrTDFTMG5vr0BT9wAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-03 07:00:37
(53 minutes ago)
Web attack/malicious scanning detected
Web App Attack
🇦🇺
rubixstudios
2026-09-03 03:24:02
(4 hours ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 02:56:03
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.48.201.208 (208.201.48.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.201.208 (208.201.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 22:55:59.996728 2026] [security2:error] [pid 25743:tid 25743] [client 34.48.201.208:58870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ozkanturker.com"] [uri "/.git/config"] [unique_id "apjhvzA8KtpnNWi2nP1AFwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ramazan
2026-09-03 02:53:49
(5 hours ago)
Fail2Ban: nginx-4xx | Failures: 10 | Log: /.env /.env.backup /.env.bak /.env.development /.env.local
Web App Attack
Hacking
🇷🇺
DZBOT
2026-09-03 02:37:45
(5 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 01:55:21
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.48.201.208 (208.201.48.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.201.208 (208.201.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 21:55:13.410459 2026] [security2:error] [pid 3088:tid 3088] [client 34.48.201.208:58330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ozera.com"] [uri "/.git/config"] [unique_id "apjTgeOFY7dSayCrZovFwgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 00:23:58
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.48.201.208 (208.201.48.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.201.208 (208.201.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 20:23:54.653283 2026] [security2:error] [pid 27684:tid 27684] [client 34.48.201.208:43936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ozarkmountainwinetrail.org"] [uri "/.git/config"] [unique_id "api-GpRuQIjpHCERBlMNqAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-03 00:10:03
(7 hours ago)
suspicious request in access.log
Web App Attack
🇳🇱
Site.eu
2026-09-02 22:48:57
(9 hours ago)
Excessive multi-domain requests
Brute-Force
🇫🇷
Octopuce
2026-09-02 22:46:40
(9 hours ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇫🇷
dynamix
2026-09-02 22:25:50
(9 hours ago)
Multiple WAF Violations
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-02 22:01:58
(9 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-01.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-02 19:56:15
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.48.201.208 (208.201.48.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.201.208 (208.201.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 15:56:11.490848 2026] [security2:error] [pid 26602:tid 26602] [client 34.48.201.208:44444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oxyveg.com"] [uri "/.git/config"] [unique_id "aph_W6hjIcQDBl7YfFX1jwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
febrian.de
2026-09-02 19:45:22
(12 hours ago)
Malicious HTTP(S) probing detected by Fail2Ban
Web App Attack