🇺🇸
TPI-Abuse
2026-09-16 04:56:44
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.96.233.57 (57.233.96.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.233.57 (57.233.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 00:56:38.683621 2026] [security2:error] [pid 19980:tid 19980] [client 34.96.233.57:33772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theatrelouisiane.com.amywoodruff.com"] [uri "/.git/config"] [unique_id "aqohhgsNvjA7BHiIwsErLgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 03:33:12
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.96.233.57 (57.233.96.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.233.57 (57.233.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 23:33:05.011234 2026] [security2:error] [pid 4342:tid 4342] [client 34.96.233.57:36078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theartbrush.tolenaar.com"] [uri "/.git/config"] [unique_id "aqoN8XmO0ylp0vQKlXP-OwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 03:10:55
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.96.233.57 (57.233.96.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.233.57 (57.233.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 23:10:51.894495 2026] [security2:error] [pid 1643:tid 1721] [client 34.96.233.57:35820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.the-aquifer.com.giere.us"] [uri "/.git/config"] [unique_id "aqoIuysDtbzoTXsg0dBAXAAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-09-15 16:19:10
(1 day ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-09-15 15:17:02
(1 day ago)
[TueSep1517:16:57.6299752026][security2:error][pid3439956:tid3439976][client34.96.233.57:0]ModSecuri ...
show more
[TueSep1517:16:57.6299752026][security2:error][pid3439956:tid3439976][client34.96.233.57:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.traslochiamo.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"aqlhaQDoLqZWd5PcYHAJkgAAAEk\"]
show less
Port Scan
Brute-Force
Web App Attack
2026-09-15 14:37:27
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-15 11:00:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.96.233.57 (57.233.96.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.233.57 (57.233.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:00:52.289194 2026] [security2:error] [pid 8523:tid 8523] [client 34.96.233.57:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pixacast.com"] [uri "/.git/config"] [unique_id "aqklZIO8ZAX_wCUf19flxwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 09:43:51
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.96.233.57 (57.233.96.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.233.57 (57.233.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 05:43:43.014733 2026] [security2:error] [pid 16378:tid 16378] [client 34.96.233.57:34372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pitigliano.montepulciano.org"] [uri "/.git/config"] [unique_id "aqkTT8J-8Huuu267Hi4sqAAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-15 09:27:56
(1 day ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config | 2026-09-15 09:27 UTC
show less
Hacking
Web App Attack
🇮🇹
VHosting
2026-09-15 09:20:04
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-09-15 08:52:41
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-09-15 08:38:01
(1 day ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Alt255
2026-09-15 08:12:47
(1 day ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.96.233.57 - - [15/Sep/2026:10:12:46 +0200] "GET /.git/config HTTP/1.1" 404 418 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack