🇺🇸
TPI-Abuse
2026-11-13 13:40:42
UTC ·
(8 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.51.220.35 (35.220.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:40:39.234093 2026] [security2:error] [pid 10440:tid 10 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.51.220.35 (35.220.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:40:39.234093 2026] [security2:error] [pid 10440:tid 10440] [client 34.51.220.35:39858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "randalcalcote.com"] [uri "/.git/config"] [unique_id "avcTV0NnL53svIaRxfWkxAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
antlac1
2026-11-13 12:08:31
UTC ·
(1 hour ago)
CrowdSec detected malicious behaviour (scenario: crowdsecurity/appsec-vpatch)
Brute-Force
🇲🇾
Rizzy
2026-11-13 11:29:02
UTC ·
(2 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:55:19
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.51.220.35 (35.220.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:55:11.634489 2026] [security2:error] [pid 21376:tid 21 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.51.220.35 (35.220.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:55:11.634489 2026] [security2:error] [pid 21376:tid 21376] [client 34.51.220.35:58050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ran101.com"] [uri "/.git/config"] [unique_id "avbsj1-Ga3eGaP2XkkdCsgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-13 10:06:22
UTC ·
(3 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:52:14
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.51.220.35 (35.220.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:52:06.862847 2026] [security2:error] [pid 30667:tid 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.51.220.35 (35.220.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:52:06.862847 2026] [security2:error] [pid 30667:tid 30667] [client 34.51.220.35:46592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ramseysgalleryofstuff.com"] [uri "/.git/config"] [unique_id "avbdxkyypJYUjjC8SrdHnwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-13 09:45:02
UTC ·
(4 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇫🇷
mail.avx.gr
2026-11-13 09:01:23
UTC ·
(4 hours ago)
plesk-rapid-ban sensitive-file-probe host=rampalakos.paladin.gr
Hacking
🇺🇸
TPI-Abuse
2026-11-13 08:53:20
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.51.220.35 (35.220.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:53:14.891698 2026] [security2:error] [pid 23377:tid 23 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.51.220.35 (35.220.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:53:14.891698 2026] [security2:error] [pid 23377:tid 23377] [client 34.51.220.35:57586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ramoundos-systems.com"] [uri "/.git/config"] [unique_id "avbP-lfuQXC46hHDCmhEXgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-11-13 08:50:00
UTC ·
(4 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 08:19:04
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.51.220.35 (35.220.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:19:00.568995 2026] [security2:error] [pid 7916:tid 797 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.51.220.35 (35.220.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:19:00.568995 2026] [security2:error] [pid 7916:tid 7975] [client 34.51.220.35:42644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ramona.town"] [uri "/.git/config"] [unique_id "avbH9OIiGqn9ORYLBtKuZgAAAhY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-13 07:24:10
UTC ·
(6 hours ago)
594 requests with url.path *phpinfo.php
100 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
2026-11-13 07:03:11
UTC ·
(6 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: SE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-13 06:23:34
UTC ·
(7 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 05:47:39
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.51.220.35 (35.220.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:47:35.675990 2026] [security2:error] [pid 26060:tid 26 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.51.220.35 (35.220.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:47:35.675990 2026] [security2:error] [pid 26060:tid 26060] [client 34.51.220.35:54666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rambleandprose.com"] [uri "/.git/config"] [unique_id "avakd1paFUlCC4_LMjiMUwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
