🇩🇪
todix
2026-09-12 10:26:06
(46 minutes ago)
Web App Attack Exploid from 34.88.10.170
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 10:04:25
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.88.10.170 (170.10.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.10.170 (170.10.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 06:04:21.189886 2026] [security2:error] [pid 23940:tid 24015] [client 34.88.10.170:53354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vanillaguerrillapublishing.com"] [uri "/.git/config"] [unique_id "aqUjpcDMoD1AvlrE2B59DwAAAY4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-12 09:56:22
(1 hour ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config | 2026-09-12 09:56 UTC
show less
Hacking
Web App Attack
🇳🇱
Mangelot Hosting
2026-09-12 09:22:59
(1 hour ago)
(modsecurity) srv102 ModSecurity 34.88.10.170 (170.10.88.34.bc.googleusercontent.com): 30 in the las ...
show more
(modsecurity) srv102 ModSecurity 34.88.10.170 (170.10.88.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇸🇪
vaia.cloud
2026-09-12 09:10:04
(2 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 08:53:44
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.10.170 (170.10.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.10.170 (170.10.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 04:53:40.012305 2026] [security2:error] [pid 3230852:tid 3230902] [client 34.88.10.170:42154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vavryn.net"] [uri "/.git/config"] [unique_id "aqUTFFaF17VQyTdK53P4bQAAAZM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 08:29:24
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.10.170 (170.10.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.10.170 (170.10.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 04:29:17.750007 2026] [security2:error] [pid 13872:tid 13872] [client 34.88.10.170:42094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vangenderen.family"] [uri "/.git/config"] [unique_id "aqUNXS8U3YsYirmjZaYTggAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-12 07:37:50
(3 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 07:28:15
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.10.170 (170.10.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.10.170 (170.10.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 03:28:11.409951 2026] [security2:error] [pid 9545:tid 9638] [client 34.88.10.170:49494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vanessa.santos.name"] [uri "/.git/config"] [unique_id "aqT_C_zOB4ZE1wwssU-BCQAAAgI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-12 07:16:24
(3 hours ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-09-12 07:10:42
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.10.170 (170.10.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.10.170 (170.10.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 03:10:34.985059 2026] [security2:error] [pid 25076:tid 25076] [client 34.88.10.170:42936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vanemby.com"] [uri "/.git/config"] [unique_id "aqT66izz_pQLW92q_ajQpAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-12 07:06:35
(4 hours ago)
34.88.10.170 - - [12/Sep/2026:09:06:35 +0200] "GET /.git/config HTTP/1.1" 403 2145 "-" "Mozilla/5.0 ...
show more
34.88.10.170 - - [12/Sep/2026:09:06:35 +0200] "GET /.git/config HTTP/1.1" 403 2145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
chrisj
2026-09-12 06:41:54
(4 hours ago)
[Sat Sep 12 06:41:53.570525 2026] [proxy_fcgi:error] [pid 1834934:tid 1834982] [client 34.88.10.170: ...
show more
[Sat Sep 12 06:41:53.570525 2026] [proxy_fcgi:error] [pid 1834934:tid 1834982] [client 34.88.10.170:40308] AH01071: Got error 'Primary script unknown'
[Sat Sep 12 06:41:53.711598 2026] [proxy_fcgi:error] [pid 1834934:tid 1834972] [client 34.88.10.170:40308] AH01071: Got error 'Primary script unknown'
[Sat Sep 12 06:41:53.845815 2026] [proxy_fcgi:error] [pid 1834934:tid 1834983] [client 34.88.10.170:40308] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇳🇱
Alt255
2026-09-12 06:02:58
(5 hours ago)
34.88.10.170 - - [12/Sep/2026:08:02:57 +0200] "GET /.git/config HTTP/1.1" 301 504 "-" "Mozilla/5.0 ( ...
show more
34.88.10.170 - - [12/Sep/2026:08:02:57 +0200] "GET /.git/config HTTP/1.1" 301 504 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-09-12 06:00:44
(5 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack