🇺🇸
TPI-Abuse
2026-09-20 20:30:10
(13 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.95.174.156 (156.174.95.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.174.156 (156.174.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 16:30:03.780825 2026] [security2:error] [pid 9628:tid 9628] [client 34.95.174.156:53094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whitelabelcasinoportal.net"] [uri "/.git/config"] [unique_id "arBCS2SoVUzLHJ_yFtiMjwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 19:07:07
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.95.174.156 (156.174.95.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.174.156 (156.174.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 15:07:01.576101 2026] [security2:error] [pid 9466:tid 9475] [client 34.95.174.156:58170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whitecrosslibrary.com"] [uri "/.git/config"] [unique_id "arAu1cH1K5Q0qGwb0O1BkAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-09-20 18:54:36
(1 hour ago)
Sensitive File Probe, 404 flood (16/60s)
Bad Web Bot
Web App Attack
🇺🇸
alecj.com
2026-09-20 18:23:35
(2 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 18:20:18
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.95.174.156 (156.174.95.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.174.156 (156.174.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 14:20:14.406844 2026] [security2:error] [pid 4668:tid 4668] [client 34.95.174.156:50088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whiteblackbird.com"] [uri "/.git/config"] [unique_id "arAj3pXe695ZE0wED41JgAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-20 17:17:45
(3 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.95.174.156 (BR/Brazil/156.174.95.34.bc.googl ...
show more
(mod_security) mod_security (id:949110) triggered by 34.95.174.156 (BR/Brazil/156.174.95.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇨🇭
leo1305
2026-09-20 16:07:09
(4 hours ago)
CrowdSec detection | scenario: http-probing
Port Scan
Web App Attack
2026-09-20 16:06:11
(4 hours ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
🇳🇱
Alt255
2026-09-20 15:35:00
(5 hours ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.95.174.156 - - \[20/Sep/2026:17:34:48 +0200\] "GET /.git/config HTTP/1.1" 301 647 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-20 15:27:41
(5 hours ago)
Web attack/malicious scanning detected
Web App Attack
2026-09-20 14:37:11
(6 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 14:34:41
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.95.174.156 (156.174.95.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.174.156 (156.174.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:34:36.025277 2026] [security2:error] [pid 20995:tid 20995] [client 34.95.174.156:47068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whipchecks.com.au"] [uri "/.git/config"] [unique_id "aq_u_IJyx0xI-bKTDl2L3gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack