πΊπΈ
TPI-Abuse
2026-08-26 10:33:09
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 06:33:00.723240 2026] [security2:error] [pid 17967:tid 17991] [client 34.87.171.206:14586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swizzlestick.com"] [uri "/.git/config"] [unique_id "ao7A3Af5XBXhfIF5T1blmgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-26 09:57:43
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:57:36.667091 2026] [security2:error] [pid 30012:tid 30012] [client 34.87.171.206:56814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kevinjewell.com"] [uri "/.git/config"] [unique_id "ao64kJA3VWLXitRAjxB4kQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-26 09:27:53
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:27:44.912375 2026] [security2:error] [pid 4620:tid 4620] [client 34.87.171.206:36944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "capriexpress.com"] [uri "/.git/config"] [unique_id "ao6xkCn2BJOVPuRNzUPSDwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-26 08:17:06
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 04:16:58.164178 2026] [security2:error] [pid 13031:tid 13031] [client 34.87.171.206:5320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ismaelcavazos.com"] [uri "/.env"] [unique_id "ao6g-uChC2UnkyHsGg-emgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¬π§
openstrike.co.uk
2026-08-26 05:15:37
(9 hours ago)
10 attacks on config grabbing URLs (type 2), PHP URLs, env grabbing URLs, VC URLs:
GET /config.json ...
show more
10 attacks on config grabbing URLs (type 2), PHP URLs, env grabbing URLs, VC URLs:
GET /config.json HTTP/1.1
GET /wp-config.php-backup HTTP/1.1
GET /.env.bak HTTP/1.1
GET /.git/config HTTP/1.1
show less
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-26 03:04:21
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 23:04:16.526102 2026] [security2:error] [pid 3164278:tid 3164327] [client 34.87.171.206:45874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isa-energy.net"] [uri "/.env"] [unique_id "ao5XsNpHqN4G1ESk5s6biAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-26 01:41:20
(12 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.87.171.206 (206.171.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 34.87.171.206 (206.171.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 21:41:16.009320 2026] [security2:error] [pid 1838:tid 1838] [client 34.87.171.206:12172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ironmountainsports.com"] [uri "/.env"] [unique_id "ao5EPF25ki27nHUfXvQIfQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-26 01:16:54
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 21:16:49.579871 2026] [security2:error] [pid 26744:tid 26744] [client 34.87.171.206:64160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ironheadsofseo.com"] [uri "/.env"] [unique_id "ao4-gZ_xM0RdaXesicomqQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΈπͺ
SkyDancer
2026-08-25 23:23:23
(14 hours ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH
Anonymous
2026-08-25 21:24:50
(16 hours ago)
[server.tmg.gr] httpd-config-scan: sites=www.irad2022.gr,www.irad2023.gr; logs=/var/log/httpd/domain ...
show more
[server.tmg.gr] httpd-config-scan: sites=www.irad2022.gr,www.irad2023.gr; logs=/var/log/httpd/domains/irad2022.gr.log,/var/log/httpd/domains/irad2023.gr.log; samples=/.env | /.git/config | /.env.bak
show less
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-25 19:35:57
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 15:35:52.090007 2026] [security2:error] [pid 25390:tid 25390] [client 34.87.171.206:10010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipostsocialmedia.com"] [uri "/.env"] [unique_id "ao3umK1gsgOKDSaN0zbA4gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
ipoac.nl
2026-08-25 19:27:16
(18 hours ago)
ipoac.nl:443 34.87.171.206 - - [25/Aug/2026:21:27:14 +0200] ipoac.nl "GET /.git/config HTTP/1.1" 404 ...
show more
ipoac.nl:443 34.87.171.206 - - [25/Aug/2026:21:27:14 +0200] ipoac.nl "GET /.git/config HTTP/1.1" 404 6457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)"
show less
Bad Web Bot
πΊπΈ
TPI-Abuse
2026-08-25 19:10:55
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 15:10:48.965032 2026] [security2:error] [pid 21269:tid 21269] [client 34.87.171.206:7348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iplantotravel.com"] [uri "/.env"] [unique_id "ao3ouK1x1OgA1avFQNQs1AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
big-cloud.nl
2026-08-25 18:22:31
(20 hours ago)
Try to access /.git/config
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-25 18:20:55
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.171.206 (206.171.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 14:20:48.134508 2026] [security2:error] [pid 9210:tid 9210] [client 34.87.171.206:43916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yogitunes.com"] [uri "/.git/config"] [unique_id "ao3dADFjwtPlGr6gWpC-6gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack