🇺🇸
TPI-Abuse
2026-11-14 20:09:33
UTC ·
(50 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 15:09:25.681965 2026] [security2:error] [pid 21960:tid 21 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 15:09:25.681965 2026] [security2:error] [pid 21960:tid 21960] [client 34.97.249.70:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ndanetworks.com"] [uri "/.git/config"] [unique_id "avi_9d25WgnPdOcEiej4UQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-11-14 09:49:14
UTC ·
(11 hours ago)
[SatNov1410:49:11.5898732026][security2:error][pid3989385:tid3989697][client34.97.249.70:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htacce ...
show more
[SatNov1410:49:11.5898732026][security2:error][pid3989385:tid3989697][client34.97.249.70:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webdisk.morandi-trasporti.ch\"][uri\"/.env.bak\"][unique_id\"avgul5iWxOOpGNCfK8KntwAAANQ\"]
show less
Port Scan
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-11-14 09:34:54
UTC ·
(11 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 09:30:49
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:30:44.445210 2026] [security2:error] [pid 28952:tid 28 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:30:44.445210 2026] [security2:error] [pid 28952:tid 28952] [client 34.97.249.70:57970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.montymilburn.com"] [uri "/.git/config"] [unique_id "avgqRHGQwykhjyVHYzrlxAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 06:15:56
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:15:50.929138 2026] [security2:error] [pid 5067:tid 509 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:15:50.929138 2026] [security2:error] [pid 5067:tid 5092] [client 34.97.249.70:44832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.mjkotob.com"] [uri "/.git/config"] [unique_id "avf8llqSXwL3_UJUxUSWGwAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 04:40:27
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 23:40:19.468775 2026] [security2:error] [pid 30408:tid 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 23:40:19.468775 2026] [security2:error] [pid 30408:tid 30415] [client 34.97.249.70:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.mindgardens.com"] [uri "/.git/config"] [unique_id "avfmMyHPNuHg8QvcFVHR8QAAAYU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 03:14:37
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:14:30.352182 2026] [security2:error] [pid 29697:tid 29 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:14:30.352182 2026] [security2:error] [pid 29697:tid 29697] [client 34.97.249.70:55226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.microscopicpablo.com"] [uri "/.git/config"] [unique_id "avfSFp0dM1sJF8PNKrNT8wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-13 23:00:59
UTC ·
(21 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-12.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-13 13:59:47
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:59:40.448084 2026] [security2:error] [pid 24905:tid 24 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:59:40.448084 2026] [security2:error] [pid 24905:tid 24905] [client 34.97.249.70:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.mail-pmg.com"] [uri "/.git/config"] [unique_id "avcXzIoWARjsEKpQQ3_-owAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 12:47:01
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:46:56.700925 2026] [security2:error] [pid 17471:tid 17 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:46:56.700925 2026] [security2:error] [pid 17471:tid 17471] [client 34.97.249.70:50332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.madburylibrary.org"] [uri "/.git/config"] [unique_id "avcGwCZ7oGYLalWWH5vH3gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:02:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:02:40.534262 2026] [security2:error] [pid 11055:tid 11 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:02:40.534262 2026] [security2:error] [pid 11055:tid 11055] [client 34.97.249.70:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.luisgtechgroup.com"] [uri "/.git/config"] [unique_id "avbgQBUoGH4Xs_-oHkjgfgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 05:55:23
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:55:17.324688 2026] [security2:error] [pid 21007:tid 21 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:55:17.324688 2026] [security2:error] [pid 21007:tid 21007] [client 34.97.249.70:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.local639.com"] [uri "/.git/config"] [unique_id "avamRSweSnDYgPxi01uIBgAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 04:13:03
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:12:58.333278 2026] [security2:error] [pid 7904:tid 790 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:12:58.333278 2026] [security2:error] [pid 7904:tid 7904] [client 34.97.249.70:54372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.liveloopers.com"] [uri "/.git/config"] [unique_id "avaOSrQBZgF1jhQOhxygdwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
gtheo99
2026-11-13 03:21:35
UTC ·
(1 day ago)
(mod_security) mod_security (id:900006) triggered by 34.97.249.70 (JP/Japan/70.249.97.34.bc.googleusercontent.com): 3 in the last 900 secs (CF_ENABLE)
Port Scan
🇺🇸
TPI-Abuse
2026-11-13 02:15:52
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:15:48.635766 2026] [security2:error] [pid 175434:tid 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.249.70 (70.249.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:15:48.635766 2026] [security2:error] [pid 175434:tid 175434] [client 34.97.249.70:36240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.lightningroddesigns.com"] [uri "/.git/config"] [unique_id "avZy1GPHKBn3UTfaTYVNVgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
