🇺🇸
TPI-Abuse
2026-09-02 08:38:25
(42 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.78.149.1 (1.149.78.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.149.1 (1.149.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 04:38:17.815543 2026] [security2:error] [pid 1581:tid 1581] [client 34.78.149.1:42336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "springmeadowventures.com"] [uri "/.git/config"] [unique_id "apfgeSitbaN9QThF-a78AwAAAIg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 05:42:27
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.78.149.1 (1.149.78.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.149.1 (1.149.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:42:22.361462 2026] [security2:error] [pid 8588:tid 8588] [client 34.78.149.1:46812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sprek.net"] [uri "/.git/config"] [unique_id "ape3PugvQ4BLdhrip0-lJAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-02 05:41:16
(3 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇳🇱
debestelapp
2026-09-02 05:35:11
(3 hours ago)
Web App Attack
🇪🇸
masterguru
2026-09-02 02:53:09
(6 hours ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
🇺🇸
TPI-Abuse
2026-09-02 02:32:09
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.78.149.1 (1.149.78.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.149.1 (1.149.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:32:04.342317 2026] [security2:error] [pid 26553:tid 26553] [client 34.78.149.1:46632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spottedeaglearts.com"] [uri "/.git/config"] [unique_id "apeKpDNN09DWlellRDdNeAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-02 00:04:49
(9 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-09-01 23:58:17
(9 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 23:45:48
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.78.149.1 (1.149.78.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.149.1 (1.149.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 19:45:44.500253 2026] [security2:error] [pid 20306:tid 20306] [client 34.78.149.1:42554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sporttaekwondo.net"] [uri "/.git/config"] [unique_id "apdjqH19zl6NDJnM-tudoAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-01 23:39:40
(9 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-09-01 23:30:37
(9 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇳🇿
Antinson
2026-09-01 23:03:57
(10 hours ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-01 23:00:35
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.78.149.1 (1.149.78.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.149.1 (1.149.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 19:00:28.191476 2026] [security2:error] [pid 1042499:tid 1042547] [client 34.78.149.1:60640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sportsoutreachnc.org"] [uri "/.git/config"] [unique_id "apdZDIxzIHI2Yu0WRxl1EgAAAcw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-01 22:44:10
(10 hours ago)
Multiple WAF Violations
Web App Attack
🇷🇴
clauss
2026-09-01 22:09:27
(11 hours ago)
34.78.149.1 - - [02/Sep/2026:01:09:27 +0300] "GET /phpinfo.php HTTP/2.0" 301 281 "-" "Mozilla/5.0 (W ...
show more
34.78.149.1 - - [02/Sep/2026:01:09:27 +0300] "GET /phpinfo.php HTTP/2.0" 301 281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.78.149.1 - - [02/Sep/2026:01:09:27 +0300] "GET /info.php HTTP/2.0" 301 281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack