🇲🇽
octageeks.com
2026-06-10 04:54:52
(6 days ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇦🇺
2000cn.com.au
2026-06-09 15:00:06
(6 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-09 13:20:42
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:20:35.636739 2026] [security2:error] [pid 11633:tid 11633] [client 34.50.121.35:52804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "watersideaccommodation.com"] [uri "/.git/config"] [unique_id "aigTI8Ejjffg7nj00X0tKAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-09 12:10:23
(6 days ago)
[TueJun0914:10:19.9305022026][security2:error][pid986028:tid987842][client34.50.121.35:0]ModSecurity ...
show more
[TueJun0914:10:19.9305022026][security2:error][pid986028:tid987842][client34.50.121.35:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"cpanel.fondazionemontgrand.ch\"][uri\"/.git/config\"][unique_id\"aigCq71gTgJdlCoXgmQ7ewAAAQc\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 11:32:56
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:32:48.330311 2026] [security2:error] [pid 10590:tid 10590] [client 34.50.121.35:37606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lucasabrahamsen.org"] [uri "/.git/config"] [unique_id "aif54O2n5n3JAjn90zLcxAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 10:43:16
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:43:12.493783 2026] [security2:error] [pid 17435:tid 17435] [client 34.50.121.35:37210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.title33.itaxcenter.com"] [uri "/.git/config"] [unique_id "aifuQCF4mU-G6KQhGg6jjwAAAGg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 08:17:49
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:17:42.246397 2026] [security2:error] [pid 13506:tid 13516] [client 34.50.121.35:57682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "e-dome.co.jp"] [uri "/.git/config"] [unique_id "aifMJu8v9V5vgY9YPygt5wAAAYc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-09 07:29:19
(6 days ago)
[TueJun0909:29:17.1711522026][security2:error][pid2555675:tid2555803][client34.50.121.35:0]ModSecuri ...
show more
[TueJun0909:29:17.1711522026][security2:error][pid2555675:tid2555803][client34.50.121.35:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"distributori-automatici-sigarette-ticino.ch\"][uri\"/.git/config\"][unique_id\"aifAzXaMzWgBsskW7s4Z2gAAARM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 07:06:54
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:06:46.858993 2026] [security2:error] [pid 14609:tid 14609] [client 34.50.121.35:49354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.engravingbyangela.com.jbcllcnet.com"] [uri "/.git/config"] [unique_id "aie7huWaZ7IhMnu2PFtgSwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 06:18:32
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:18:25.362882 2026] [security2:error] [pid 13194:tid 13194] [client 34.50.121.35:45226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.family.hatfulofrain.com"] [uri "/.git/config"] [unique_id "aiewMRdwWnDavRm_wlPq3wAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 04:22:45
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:949110) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:22:38.228725 2026] [security2:error] [pid 3130:tid 3130] [client 34.50.121.35:48382] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hotelrevabookings.com.hamiltonbookings.com"] [uri "/.git/config"] [unique_id "aieVDrCpTJm2RswlICmsIgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 04:07:04
(1 week ago)
34.50.121.35 - - [09/Jun/2026:04:07:03 +0000] "GET /.git/config HTTP/1.1" 404 49471 "-" "Mozilla/5.0 ...
show more
34.50.121.35 - - [09/Jun/2026:04:07:03 +0000] "GET /.git/config HTTP/1.1" 404 49471 "-" "Mozilla/5.0 (X11; U; FreeBSD; i386; en-US; rv:1.7) Gecko"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 04:03:46
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:03:39.083508 2026] [security2:error] [pid 10121:tid 10121] [client 34.50.121.35:49502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ozonegenerator.mroxygen.org"] [uri "/.git/config"] [unique_id "aieQmzrPqGTCdzIe8ZangAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 02:35:07
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:35:00.896109 2026] [security2:error] [pid 28360:tid 28360] [client 34.50.121.35:48934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gardner-cpanel3.dnchosting.com"] [uri "/.git/config"] [unique_id "aid71KyXncrnAz40MGvzKwAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 01:39:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.121.35 (35.121.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:39:12.726303 2026] [security2:error] [pid 19315:tid 19335] [client 34.50.121.35:36702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomskrodzki.com"] [uri "/.git/config"] [unique_id "aiduwMIHEskT7xcpsAfkHQAAAJE"]
show less
Brute-Force
Bad Web Bot
Web App Attack