2026-09-25 22:50:02,608 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.142.41.178
.. ...
show more2026-09-25 22:50:02,608 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.142.41.178
...
show less
2026-09-23 00:31:46,079 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.142.41.178
.. ...
show more2026-09-23 00:31:46,079 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.142.41.178
...
show less
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.142.41.178, Reason: ...
show moreCluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.142.41.178, Reason:[(mod_security) mod_security (id:210492) triggered by 34.142.41.178 (GB/United Kingdom/178.41.142.34.bc.googleusercontent.com): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
[TueSep2205:33:06.5592232026][security2:error][pid2841490:tid2841557][client34.142.41.178:0]ModSecur ...
show more[TueSep2205:33:06.5592232026][security2:error][pid2841490:tid2841557][client34.142.41.178:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"annunci-ticino.ch\"][uri\"/\"][unique_id\"arH28pKvzqQZxp47RjWF3AAAAgA\"]
show less
[Tue Sep 22 04:52:47.260430 2026] [php:error] [pid 602945] [client 34.142.41.178:37666] script '/var ...
show more[Tue Sep 22 04:52:47.260430 2026] [php:error] [pid 602945] [client 34.142.41.178:37666] script '/var/www/html/brume.org/radios/phpinfo.php' not found or unable to stat
[Tue Sep 22 04:52:47.306491 2026] [php:error] [pid 602945] [client 34.142.41.178:37666] script '/var/www/html/brume.org/radios/info.php' not found or unable to stat
[Tue Sep 22 04:52:47.412115 2026] [php:error] [pid 602945] [client 34.142.41.178:37666] script '/var/www/html/brume.org/radios/php.php' not found or unable to stat
[Tue Sep 22 04:52:47.468596 2026] [php:error] [pid 602945] [client 34.142.41.178:37666] script '/var/www/html/brume.org/radios/i.php' not found or unable to stat
[Tue Sep 22 04:52:47.509265 2026] [php:error] [pid 602945] [client 34.142.41.178:37666] script '/var/www/html/brume.org/radios/pi.php' not found or unable to stat
...
show less
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show moreThis address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /.git/config (+17 more) | 2026-09-22 02:12 UTC
show less