|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.48.15.156 (156.15.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 15:32:32.629150 2026] [security2:error] [pid 9029:tid 905 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.15.156 (156.15.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 15:32:32.629150 2026] [security2:error] [pid 9029:tid 9057] [client 34.48.15.156:37040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gaqa.org"] [uri "/.git/config"] [unique_id "arwSUKOE9UcZOa63xDQ11wAAABg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
cwytech
|
|
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/http-honeypath-sniper-crit.
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.48.15.156 (156.15.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 23:10:17.364224 2026] [security2:error] [pid 7995:tid 799 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.15.156 (156.15.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 23:10:17.364224 2026] [security2:error] [pid 7995:tid 7995] [client 34.48.15.156:52248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pondplain.org"] [uri "/.git/config"] [unique_id "arnamYQ64-Y0M32c36EEygAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
WeCloudit-Anti-Abuse
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Web App Attack
Hacking
|
|
🇳🇱
e.fierstra
|
|
ModSecurity hits exceeded
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
homeshowdomain.nl
|
|
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-25.
|
Web App Attack
SSH
Hacking
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force
Web App Attack
Hacking
|
|
🇦🇺
2000cn.com.au
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Web App Attack
Hacking
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive 404/403 errors
|
Brute-Force
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.48.15.156 (156.15.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 16:58:17.353688 2026] [security2:error] [pid 15560:tid 15 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.15.156 (156.15.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 16:58:17.353688 2026] [security2:error] [pid 15560:tid 15735] [client 34.48.15.156:37102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pueblodermatology.com"] [uri "/.git/config"] [unique_id "arGaab2-gfk15DULvhEasQAAAUU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.48.15.156 (156.15.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 15:12:09.833292 2026] [security2:error] [pid 17704:tid 17 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.15.156 (156.15.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 15:12:09.833292 2026] [security2:error] [pid 17704:tid 17704] [client 34.48.15.156:38202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "propertygalleria.com"] [uri "/.git/config"] [unique_id "arGBiQqkB1eOWuCuc-SLOAAAABU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
ghostwarriors
|
|
Attempts against non-existent wp-login
|
Brute-Force
Web App Attack
|
