๐บ๐ธ
TPI-Abuse
2026-09-29 18:43:04
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.146.56.39 (39.56.146.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.56.39 (39.56.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 14:43:01.253916 2026] [security2:error] [pid 22591:tid 22591] [client 34.146.56.39:40348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.alltecmachine.com"] [uri "/.git/config"] [unique_id "arwGtWxhsQ42aNwunXriqwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-09-29 16:09:28
(3 weeks ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-09-29 09:08:07
(3 weeks ago)
[ns3.backorder.gr] httpd-config-scan: sites=www.blazos.com; logs=/var/log/httpd/domains/blazos.com.l ...
show more
[ns3.backorder.gr] httpd-config-scan: sites=www.blazos.com; logs=/var/log/httpd/domains/blazos.com.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 06:42:11
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.146.56.39 (39.56.146.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.56.39 (39.56.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 02:42:05.213031 2026] [security2:error] [pid 31494:tid 31494] [client 34.146.56.39:52348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blank.lindenwoodpark.org"] [uri "/.git/config"] [unique_id "artdvRvOSi743iMhVcAUJQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 09:08:05
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.146.56.39 (39.56.146.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.56.39 (39.56.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 05:08:00.192715 2026] [security2:error] [pid 14972:tid 15039] [client 34.146.56.39:42162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bible-alive.aussiepens.com"] [uri "/.git/config"] [unique_id "aroucLsym3m2CLz_AZkdbAAAAUE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 05:23:30
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.146.56.39 (39.56.146.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.56.39 (39.56.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 01:23:26.160403 2026] [security2:error] [pid 5628:tid 5628] [client 34.146.56.39:59832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bhu.rcto.us"] [uri "/.git/config"] [unique_id "arn5zgwWSf1iWd_YRXpu4wAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
middelkoopcc
2026-09-27 18:29:01
(3 weeks ago)
2026-09-27 20:26:17 GET /.git/config [301] && 2026-09-27 20:26:18 GET /.env [301] && 2026-09-27 20:2 ...
show more
2026-09-27 20:26:17 GET /.git/config [301] && 2026-09-27 20:26:18 GET /.env [301] && 2026-09-27 20:26:24 GET /.env.bak [301] && 119 more within 20 minutes
show less
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-09-27 06:50:13
(3 weeks ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-09-27 06:38:10
(3 weeks ago)
34.146.56.39 - - [27/Sep/2026:08:38:05 +0200] "GET /.env.local HTTP/1.1" 404 631 "-" "Mozilla/5.0 (X ...
show more
34.146.56.39 - - [27/Sep/2026:08:38:05 +0200] "GET /.env.local HTTP/1.1" 404 631 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.146.56.39 - - [27/Sep/2026:08:38:05 +0200] "GET /.env.production HTTP/1.1" 404 631 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.146.56.39 - - [27/Sep/2026:08:38:05 +0200] "GET /.env.staging HTTP/1.1" 404 631 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.146.56.39 - - [27/Sep/2026:08:38:05 +0200] "GET /.env.development HTTP/1.1" 404 631 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.146.56.39 - - [27/Sep/2026:08:38:06 +0200] "GET /.env.test HTTP/1.1" 404 631 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.146.56.39 - - [27/Sep/2026:08:38:06 +020
show less
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-27 02:43:23
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.146.56.39 (39.56.146.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.56.39 (39.56.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 22:43:12.839158 2026] [security2:error] [pid 30441:tid 30441] [client 34.146.56.39:36900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.franzcorpinc.com.kevinfranz.com"] [uri "/.git/config"] [unique_id "ariCwBOYB7jNlX3Z9cgH0AAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 00:30:13
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.146.56.39 (39.56.146.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.56.39 (39.56.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 20:30:08.227053 2026] [security2:error] [pid 16839:tid 16839] [client 34.146.56.39:46470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.frankienash.nashes.net"] [uri "/.git/config"] [unique_id "arhjkLJLqpVxz0Luocw12gAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-09-26 23:07:18
(4 weeks ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-26 22:20:43
(4 weeks ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
Alt255
2026-09-25 23:02:54
(4 weeks ago)
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.146.56.39 - - [26/Sep/2026:01:02:32 +0200] "GET /.git/config HTTP/1.1" 301 508 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-25 22:01:19
(4 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-24.
show less
Web App Attack
SSH
Hacking