🇺🇸
TPI-Abuse
2026-09-22 12:34:13
(3 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.65.114.224 (224.114.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 34.65.114.224 (224.114.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:34:06.208526 2026] [security2:error] [pid 21723:tid 21723] [client 34.65.114.224:59088] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "scrase.com"] [uri "/.git/config"] [unique_id "arJ1vi3JP5wf0n8iSYSHZAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-09-22 12:19:28
(3 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
gamabe
2026-09-22 11:35:56
(4 hours ago)
Detected crowdsecurity/http-sensitive-files attack pattern. Reported by CrowdSec IDS.
Hacking
🇺🇸
TPI-Abuse
2026-09-22 10:37:57
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 06:37:52.717559 2026] [security2:error] [pid 21838:tid 21838] [client 34.65.114.224:60404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scraggw.com"] [uri "/.git/config"] [unique_id "arJagPDnG5lqffmPro7u9gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 10:19:59
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 06:19:52.461442 2026] [security2:error] [pid 15702:tid 15702] [client 34.65.114.224:40474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scr-publications.us.schlegelcreative.com"] [uri "/.git/config"] [unique_id "arJWSJKN-PEhqTWrlgDKTgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 09:47:38
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:47:34.239649 2026] [security2:error] [pid 22114:tid 22114] [client 34.65.114.224:60798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scperu.net"] [uri "/.git/config"] [unique_id "arJOtrjAP94L3VmyUH2_eAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
ayayntr
2026-09-22 09:32:55
(6 hours ago)
[Tue Sep 22 12:32:52.801530 2026] [proxy_fcgi:error] [pid 3212:tid 3260] [client 34.65.114.224:40780 ...
show more
[Tue Sep 22 12:32:52.801530 2026] [proxy_fcgi:error] [pid 3212:tid 3260] [client 34.65.114.224:40780] AH01071: Got error 'Primary script unknown'
[Tue Sep 22 12:32:52.889347 2026] [proxy_fcgi:error] [pid 3212:tid 3254] [client 34.65.114.224:40780] AH01071: Got error 'Primary script unknown'
[Tue Sep 22 12:32:52.972400 2026] [proxy_fcgi:error] [pid 3212:tid 3258] [client 34.65.114.224:40780] AH01071: Got error 'Primary script unknown'
[Tue Sep 22 12:32:53.250744 2026] [proxy_fcgi:error] [pid 3212:tid 3263] [client 34.65.114.224:40780] AH01071: Got error 'Primary script unknown'
[Tue Sep 22 12:32:53.310651 2026] [proxy_fcgi:error] [pid 3212:tid 3242] [client 34.65.114.224:40780] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
SSH
🇳🇱
Site.eu
2026-09-22 09:12:03
(6 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-22 08:47:01
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 04:46:56.884303 2026] [security2:error] [pid 21987:tid 21987] [client 34.65.114.224:60640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scoutinsignia.com"] [uri "/.git/config"] [unique_id "arJAgKIeJwR3wn6OejTjHAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 07:31:52
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 03:31:48.989830 2026] [security2:error] [pid 4591:tid 4591] [client 34.65.114.224:43478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scottwithers.net"] [uri "/.git/config"] [unique_id "arIu5N7hDZv_4wvq95gqBgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 07:13:26
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 03:13:19.327831 2026] [security2:error] [pid 15287:tid 15300] [client 34.65.114.224:55934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scottspencergfx.com"] [uri "/.git/config"] [unique_id "arIqj5MCLW7d-qh7fLWwfAAAAIE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 06:29:12
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 02:29:06.372704 2026] [security2:error] [pid 9770:tid 9770] [client 34.65.114.224:37602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scotts.net"] [uri "/.git/config"] [unique_id "arIgMr5kwFhstu9wYDLqWgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-22 05:03:30
(10 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 04:09:48
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 00:09:43.536611 2026] [security2:error] [pid 32530:tid 32530] [client 34.65.114.224:38296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scottcampbellconstruction.com"] [uri "/.git/config"] [unique_id "arH_hwT8C8QqjE-zlHQJsgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 03:37:17
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.114.224 (224.114.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 23:37:13.252214 2026] [security2:error] [pid 24906:tid 24906] [client 34.65.114.224:39458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scott.bccworldmedia.com"] [uri "/.git/config"] [unique_id "arH36SmjDBbqtWx1IvqBBAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
