🇺🇸
TPI-Abuse
2026-06-09 15:19:28
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:19:21.483958 2026] [security2:error] [pid 8800:tid 8800] [client 34.92.123.55:52608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "souldata.com"] [uri "/.git/config"] [unique_id "aigu-fQZqyJgt7UNe0jSVgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
GoodOldTOS
2026-06-09 15:18:03
(2 weeks ago)
Bad keywords detected in request: /.git/config/.git
Web App Attack
🇷🇴
INTEQ
2026-06-09 14:19:47
(2 weeks ago)
Web attack from 34.92.123.55
Web App Attack
🇫🇷
Little Iguana
2026-06-09 13:10:44
(2 weeks ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇦🇺
2000cn.com.au
2026-06-09 13:08:38
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-09 11:57:26
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:57:21.277043 2026] [security2:error] [pid 26744:tid 26744] [client 34.92.123.55:39832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "untraceable.org"] [uri "/.git/config"] [unique_id "aif_ofoZqR4lMGi0_c9KfgAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 10:08:19
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:08:14.136924 2026] [security2:error] [pid 19485:tid 19485] [client 34.92.123.55:58256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "srosa.com"] [uri "/.git/config"] [unique_id "aifmDqjez4SdTXO4Ss4z6QAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-06-09 10:05:49
(2 weeks ago)
Try to access /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 09:30:23
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:30:16.524203 2026] [security2:error] [pid 19630:tid 19630] [client 34.92.123.55:46228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawleyrentals.com"] [uri "/.git/config"] [unique_id "aifdKMyQgKQ3txbX1YARiQAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 09:00:31
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:00:23.633643 2026] [security2:error] [pid 19415:tid 19415] [client 34.92.123.55:34984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.periodpiano.org"] [uri "/.git/config"] [unique_id "aifWJ3fBgE4r4lnkDNIDcQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-09 08:35:16
(2 weeks ago)
[TueJun0910:35:13.7755712026][security2:error][pid2614807:tid2614872][client34.92.123.55:0]ModSecuri ...
show more
[TueJun0910:35:13.7755712026][security2:error][pid2614807:tid2614872][client34.92.123.55:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"federicorella.ch\"][uri\"/.git/config\"][unique_id\"aifQQd_EJT6wDQm7DzAbngAAAIA\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 08:17:32
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:17:29.243305 2026] [security2:error] [pid 10787:tid 10787] [client 34.92.123.55:34198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andamiospime.com.disenowebprofesional.com"] [uri "/.git/config"] [unique_id "aifMGcrDYWju78bqkO-B9wAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 07:41:26
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:41:23.190947 2026] [security2:error] [pid 3524:tid 3524] [client 34.92.123.55:37754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.perryoclock.healingtrek.com"] [uri "/.git/config"] [unique_id "aifDo7GsJcXnYlO_ymPVuwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 02:56:21
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:56:14.380504 2026] [security2:error] [pid 27938:tid 27938] [client 34.92.123.55:56554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ppcspetsitting.com"] [uri "/.git/config"] [unique_id "aieAznS_upBizY211mms1gAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 01:59:30
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.123.55 (55.123.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:59:23.780567 2026] [security2:error] [pid 31074:tid 31074] [client 34.92.123.55:47734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.meneerenmevrouw.boens.org"] [uri "/.git/config"] [unique_id "aidze3E4v2gLKBxP-27g6wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack