🇺🇸
TPI-Abuse
2026-08-31 07:13:50
(18 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.94.244.113 (113.244.94.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.94.244.113 (113.244.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 03:13:42.879111 2026] [security2:error] [pid 30823:tid 30823] [client 34.94.244.113:52806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wp.hotpay.co"] [uri "/.git/config"] [unique_id "apUppppFDpd7jg-TG7t-BAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
jasperedv.de
2026-08-31 06:25:21
(1 hour ago)
Apache Login - Brutforcing
Web App Attack
Brute-Force
🇳🇱
WeCloudit-Anti-Abuse
2026-08-31 06:22:29
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇫🇮
6kilowatti
2026-08-31 06:21:40
(1 hour ago)
2026/08/31 09:21:39 [error] 1948775#1948775: *44801 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/08/31 09:21:39 [error] 1948775#1948775: *44801 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 34.94.244.113, server: wp.6kw.fi, request: "GET /phpinfo.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/wp.6kw.fi.sock:", host: "wp.6kw.fi"
2026/08/31 09:21:40 [error] 1948775#1948775: *44801 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 34.94.244.113, server: wp.6kw.fi, request: "GET /info.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/wp.6kw.fi.sock:", host: "wp.6kw.fi"
...
show less
Web App Attack
🇦🇺
screwlooseit.com.au
2026-08-31 05:48:36
(1 hour ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/113.244.94.34.bc.googleuserconten ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/113.244.94.34.bc.googleusercontent.com
show less
Web App Attack
🇳🇿
Antinson
2026-08-31 04:29:01
(3 hours ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇳🇱
Site.eu
2026-08-31 04:02:35
(3 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
mnsf
2026-08-30 15:05:22
(16 hours ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-08-30 14:47:40
(16 hours ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-08-30 14:40:41
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.94.244.113 (113.244.94.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.94.244.113 (113.244.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 10:40:35.752251 2026] [security2:error] [pid 29559:tid 29559] [client 34.94.244.113:54900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swelpix.com"] [uri "/.git/config"] [unique_id "apRA41hqtas96SS3NmXLKwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-08-30 14:05:35
(17 hours ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 12:46:27
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.94.244.113 (113.244.94.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.94.244.113 (113.244.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 08:46:23.096056 2026] [security2:error] [pid 8489:tid 8489] [client 34.94.244.113:45522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sweak.com"] [uri "/.git/config"] [unique_id "apQmH5TfDfZItIPKQ2AUqgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 12:08:33
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.94.244.113 (113.244.94.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.94.244.113 (113.244.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 08:08:25.596931 2026] [security2:error] [pid 28951:tid 28951] [client 34.94.244.113:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swarnar.com"] [uri "/.git/config"] [unique_id "apQdOdQ0TH11dGEb1L4w7wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
WebNiraj
2026-08-30 10:19:41
(21 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.94.244.113 (113.244.94.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 34.94.244.113 (113.244.94.34.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
show less
Brute-Force
🇸🇪
vaia.cloud
2026-08-30 09:55:02
(21 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack