🇺🇸
TPI-Abuse
2026-11-03 23:10:57
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.120.114 (114.120.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:10:50.016912 2026] [security2:error] [pid 20937:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.120.114 (114.120.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:10:50.016912 2026] [security2:error] [pid 20937:tid 20937] [client 34.50.120.114:40840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "transparentforest.com"] [uri "/.git/config"] [unique_id "aupp-nkBtnbC8ZHbg_8pNQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-11-03 18:22:26
UTC ·
(4 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 16:35:05
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.120.114 (114.120.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 11:35:00.077950 2026] [security2:error] [pid 30990:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.120.114 (114.120.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 11:35:00.077950 2026] [security2:error] [pid 30990:tid 30990] [client 34.50.120.114:40816] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "transmittersolution.com"] [uri "/.git/config"] [unique_id "auoNNMi_1cRn8rWz_-_obgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-11-03 12:22:36
UTC ·
(5 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2026-11-03 12:10:06
UTC ·
(5 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 07:08:19
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.120.114 (114.120.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:08:16.857214 2026] [security2:error] [pid 2306:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.120.114 (114.120.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:08:16.857214 2026] [security2:error] [pid 2306:tid 2306] [client 34.50.120.114:41442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.infinitynull.mindchill.net"] [uri "/.git/config"] [unique_id "aumIYGmXmC3hh-T_2ZPbEgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-11-03 02:43:26
UTC ·
(5 days ago)
csagent: score 21.4: 404 noise floor x6, secrets grab x2; 1 domain(s) in 1s
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 01:30:59
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.120.114 (114.120.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:30:52.782457 2026] [security2:error] [pid 21700:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.120.114 (114.120.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:30:52.782457 2026] [security2:error] [pid 21700:tid 21700] [client 34.50.120.114:41728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trafficstopper.com"] [uri "/.git/config"] [unique_id "auk5TAl_qckeIWsuoxnTEAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-02 17:45:03
UTC ·
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
iwle
2026-11-02 17:39:54
UTC ·
(5 days ago)
[Mon Nov 02 12:39:51.316463 2026] [:error] [pid 1549:tid 1650] [client 34.50.120.114:0] [client 34.50.120.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php ...
show more
[Mon Nov 02 12:39:51.316463 2026] [:error] [pid 1549:tid 1650] [client 34.50.120.114:0] [client 34.50.120.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "www.iwle.com"] [uri "/.env"] [unique_id "aujK51Z6OqCAWqsA2c2Y1gAAAFY"]
[Mon Nov 02 12:39:52.177190 2026] [:error] [pid 1541:tid 1693] [client 34.50.120.114:0] [client 34.50.120.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\
...
show less
Bad Web Bot
Web App Attack
🇩🇪
palla89
2026-11-02 15:10:02
UTC ·
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.50.120.114 (ID/Indonesia/114.120.50.34.bc.googleusercontent.com)
SQL Injection
Anonymous
2026-11-02 14:54:48
UTC ·
(5 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-11-02 08:36:13
UTC ·
(6 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack