🇫🇷
dynamix
2026-09-06 09:32:07
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇩🇪
enjoyably
2026-09-06 06:08:33
UTC ·
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇬🇧
consul.to
2026-09-06 04:23:11
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 03:08:05
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.92.202.1 (1.202.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:08:01.083728 2026] [security2:error] [pid 11729:tid 1174 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.202.1 (1.202.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:08:01.083728 2026] [security2:error] [pid 11729:tid 11749] [client 34.92.202.1:37164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belfastpropertyagency.com"] [uri "/public/.git/config"] [unique_id "apzZESdCOveZ2ZzsmBlFAgAAAUw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 02:00:46
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.92.202.1 (1.202.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:00:41.710667 2026] [security2:error] [pid 4249:tid 4249] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.202.1 (1.202.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:00:41.710667 2026] [security2:error] [pid 4249:tid 4249] [client 34.92.202.1:59640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.chitsey.com"] [uri "/api/.git/config"] [unique_id "apzJSUYt8e-BOF63qIu9owAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:39:11
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.92.202.1 (1.202.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:39:04.338388 2026] [security2:error] [pid 28464:tid 2846 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.202.1 (1.202.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:39:04.338388 2026] [security2:error] [pid 28464:tid 28464] [client 34.92.202.1:55720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "firebelly.org"] [uri "/htdocs/.git/config"] [unique_id "apzEOCrWYNDGetERCfoQEAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-05 23:49:35
UTC ·
(2 months ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇲🇾
Rizzy
2026-09-05 11:25:46
UTC ·
(2 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
Cloud86 B.V.
2026-09-05 08:48:02
UTC ·
(2 months ago)
categories: DDoS Attack
DDoS Attack
🇬🇷
setupgr
2026-09-04 17:40:35
UTC ·
(2 months ago)
(mod_security) mod_security (id:11000011) triggered by 34.92.202.1 (HK/Hong Kong/-/Hong Kong/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Sep 04 20:40:33.652278 2026] [secu ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.92.202.1 (HK/Hong Kong/-/Hong Kong/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Sep 04 20:40:33.652278 2026] [security2:error] [pid 568850:tid 568984] [client 34.92.202.1:34854] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 1.202.92.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "mail.michalismaniatis.com"] [uri "/"] [unique_id "apsCkdsgoTHQe1UovRZHcAAAAw4"]
show less
Port Scan
🇵🇱
mscode.pl
2026-09-04 12:24:33
UTC ·
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Zone: pdm.mscode.pl
Endpoint: /
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Sa ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Zone: pdm.mscode.pl
Endpoint: /
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36
show less
Bad Web Bot
🇫🇷
masterguru
2026-09-04 06:03:12
UTC ·
(2 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 34.92.202.1 (1.202.92.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-196)
Hacking
🇫🇷
Jimbo67
2026-09-04 04:10:48
UTC ·
(2 months ago)
Cloudflare WAF: 1 hits in 30s | action=block | abuse=suspicious_probe | categories=19 | rule_id=3329c9d804134f3e89780d69bfd872dc | URIs=/ | confidence=0.82
Bad Web Bot
🇳🇱
Cloud86 B.V.
2026-09-04 04:09:01
UTC ·
(2 months ago)
categories: DDoS Attack
DDoS Attack