🇺🇸
TPI-Abuse
2026-11-03 20:54:13
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.234.17.101 (101.17.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 15:54:06.916175 2026] [security2:error] [pid 17750:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.17.101 (101.17.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 15:54:06.916175 2026] [security2:error] [pid 17750:tid 17750] [client 35.234.17.101:43254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aeservices.com"] [uri "/.git/config"] [unique_id "aupJ7p6ps5saX40UylGY2AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 15:30:18
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.234.17.101 (101.17.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:30:11.557228 2026] [security2:error] [pid 15421:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.17.101 (101.17.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:30:11.557228 2026] [security2:error] [pid 15421:tid 15421] [client 35.234.17.101:39794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aes-nihil.com"] [uri "/.git/config"] [unique_id "aun-A3ZO6X8xjEIfQ2LnsAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
maxxsense
2026-11-03 08:22:11
UTC ·
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.234.17.101 (TW/Taiwan/101.17.234.35.bc.googleusercontent.com)
SQL Injection
🇨🇭
Origon
2026-11-03 04:54:19
UTC ·
(5 days ago)
plesk-modsecurity - IP: 35.234.17.101 - [03/Nov/2026:05:54:18.355065 +0100] aulo-u6tWVHhv3c-9G4cJQAAAFI 35.234.17.101 44838 127.0.0.1 7081 [03/Nov/2026:05:54:18.774559 +0100] aulo-u6tWVHhv3c-9G4cJwAAAEk 35.234.17.101 44852 127.0.0.1 7081 [03/Nov/202 ...
show more
plesk-modsecurity - IP: 35.234.17.101 - [03/Nov/2026:05:54:18.355065 +0100] aulo-u6tWVHhv3c-9G4cJQAAAFI 35.234.17.101 44838 127.0.0.1 7081 [03/Nov/2026:05:54:18.774559 +0100] aulo-u6tWVHhv3c-9G4cJwAAAEk 35.234.17.101 44852 127.0.0.1 7081 [03/Nov/2026:05:54:18.980375 +0100] aulo-u6tWVHhv3c-9G4cKAAAAEU 35.234.17.101 44860 127.0.0.1 7081 [03/Nov/2026:05:54:19.186782 +0100] aulo-55XwXJdWhvR5Fi83AAAAAc 35.234.17.101 44876 127.0.0.1 7081
show less
Web App Attack
🇮🇹
VHosting
2026-11-02 23:35:03
UTC ·
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 20:07:29
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.234.17.101 (101.17.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 15:07:22.700440 2026] [security2:error] [pid 22004:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.17.101 (101.17.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 15:07:22.700440 2026] [security2:error] [pid 22004:tid 22004] [client 35.234.17.101:42220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aschmidtconsulting.com"] [uri "/.git/config"] [unique_id "aujteqA3alA1onETilVogwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hary74656
2026-11-02 19:51:53
UTC ·
(5 days ago)
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
ched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anoma ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
ched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 35)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "aschi.at"] [uri "/"] [unique_id "aujp2dluLMRp-19uF0neVAAAAAQ"]
[Mon Nov 02 20:51:53.427772 2026] [vhost aschi.at] [security2:error] [pid 1076:tid 139915606095552] [client 35.234.17.101:37172] [realclient 35.234.17.101:37172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "aschi.at"] [uri "/"] [unique_id "aujp2dluLMRp-19uF0neVgAAAAc"]
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 14:27:06
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.234.17.101 (101.17.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:26:59.699508 2026] [security2:error] [pid 24094:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.17.101 (101.17.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:26:59.699508 2026] [security2:error] [pid 24094:tid 24094] [client 35.234.17.101:50904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asisecuresystems.com"] [uri "/.git/config"] [unique_id "auids4ycvUPI8Oe9czAVYwAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-02 13:46:00
UTC ·
(5 days ago)
[web.zebs.ch] httpd-config-scan: sites=asiqual.com; logs=/var/log/httpd/domains/asiqual.com.log; samples=/.git/config | /.env | /.env.local
Hacking
Web App Attack