🇺🇸
TPI-Abuse
2026-11-13 03:49:30
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:49:24.447889 2026] [security2:error] [pid 22202:tid 22 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:49:24.447889 2026] [security2:error] [pid 22202:tid 22225] [client 34.92.221.93:45624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theinfinitenow.com"] [uri "/.git/config"] [unique_id "avaIxDLNBzufJC7ukoZsYQAAAMY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 02:51:38
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:51:32.929176 2026] [security2:error] [pid 15874:tid 15 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:51:32.929176 2026] [security2:error] [pid 15874:tid 15874] [client 34.92.221.93:50350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theillustrator.net"] [uri "/.git/config"] [unique_id "avZ7NPVTZbKJbNqigRAHjgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-13 02:48:47
UTC ·
(7 hours ago)
517 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-13 01:39:42
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 20:39:35.754294 2026] [security2:error] [pid 26902:tid 26 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 20:39:35.754294 2026] [security2:error] [pid 26902:tid 26902] [client 34.92.221.93:57034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehunterstomb.com"] [uri "/.git/config"] [unique_id "avZqVxxSmtwjqXSZeF-23wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-12 22:47:38
UTC ·
(11 hours ago)
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.92.221.93 - - [12/Nov/2026:23:47:30 +0100] "GET /.git/config HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ...
show more
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.92.221.93 - - [12/Nov/2026:23:47:30 +0100] "GET /.git/config HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇮🇳
TFG-Server
2026-11-12 22:25:27
UTC ·
(11 hours ago)
Automated block: File theft attempt - tried to download secret/backup file x206 (e.g. /info.php.bak)
Web App Attack
Hacking
🇸🇪
vaia.cloud
2026-11-12 21:20:01
UTC ·
(12 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇿🇦
conure.sh
2026-11-12 20:06:41
UTC ·
(13 hours ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 1s
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 19:54:48
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:54:43.282988 2026] [security2:error] [pid 29536:tid 29 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:54:43.282988 2026] [security2:error] [pid 29536:tid 29536] [client 34.92.221.93:54148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehealthyplaceclayton.com"] [uri "/.git/config"] [unique_id "avYZg5VmkkvSvTq5cyYYcgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 19:37:35
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:37:31.300188 2026] [security2:error] [pid 5728:tid 572 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:37:31.300188 2026] [security2:error] [pid 5728:tid 5728] [client 34.92.221.93:34204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehealthcontent.com"] [uri "/.git/config"] [unique_id "avYVe0y88wLus5qMAzZ-aAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-12 17:57:05
UTC ·
(16 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 17:54:05
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:53:58.391587 2026] [security2:error] [pid 27543:tid 27 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:53:58.391587 2026] [security2:error] [pid 27543:tid 27543] [client 34.92.221.93:51556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehandyfamily.net"] [uri "/.git/config"] [unique_id "avX9NgxnKBxcoGPHeOp_oAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-12 17:41:09
UTC ·
(16 hours ago)
Pay by Jag firewall: repeated blocked web requests from this address across protected sites; automatic ban.
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-12 17:18:51
UTC ·
(16 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 13:43:49
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:43:42.288155 2026] [security2:error] [pid 31807:tid 31 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.221.93 (93.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:43:42.288155 2026] [security2:error] [pid 31807:tid 31807] [client 34.92.221.93:47340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theseventhcongregationofladderdayvixens.org.tortoisehosting.com"] [uri "/.git/config"] [unique_id "avXCjnKu48TJR4-5dvljOwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack