🇬🇧
thetomtaylor.co.uk
2026-09-29 01:08:00
(1 month ago)
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01,wa02]
Hacking
SQL Injection
Web App Attack
🇫🇷
Catalin Negru
2026-09-27 04:55:08
(1 month ago)
2026-09-27 07:55:07,061 fail2ban.actions [289529]: NOTICE [apache-scan] Ban 34.78.86.130
2026-09-27 07:55:07,094 fail2ban.actions [289529]: NOTICE [apache-security] Ban 34.78.86.130
2026-09-27 07:55:07,371 fail2ban.actions [289 ...
show more
2026-09-27 07:55:07,061 fail2ban.actions [289529]: NOTICE [apache-scan] Ban 34.78.86.130
2026-09-27 07:55:07,094 fail2ban.actions [289529]: NOTICE [apache-security] Ban 34.78.86.130
2026-09-27 07:55:07,371 fail2ban.actions [289529]: NOTICE [laravel-env] Ban 34.78.86.130
2026-09-27 07:55:07,403 fail2ban.actions [289529]: NOTICE [apache-404] Ban 34.78.86.130
2026-09-27 07:55:07,449 fail2ban.actions [289529]: NOTICE [web-scanner] Ban 34.78.86.130
...
show less
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-09-26 15:42:54
(1 month ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 15:08:16
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.78.86.130 (130.86.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:08:12.924854 2026] [security2:error] [pid 9193:tid 919 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.86.130 (130.86.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:08:12.924854 2026] [security2:error] [pid 9193:tid 9193] [client 34.78.86.130:57226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.tag-scaffolding.com"] [uri "/.git/config"] [unique_id "arff3EXJcRVToSjNeNnBMAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 13:01:06
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.78.86.130 (130.86.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 09:01:00.178159 2026] [security2:error] [pid 15640:tid 15 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.86.130 (130.86.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 09:01:00.178159 2026] [security2:error] [pid 15640:tid 15640] [client 34.78.86.130:58438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "albertacottagebuilder.com.weyoungrenovations.com"] [uri "/.git/config"] [unique_id "arfCDMF4D3aJ1CpHxrmQFwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-09-26 09:11:33
(1 month ago)
34.78.86.130 - - [26/Sep/2026:09:10:31 +0000] "GET /.env HTTP/1.1" 403 14405 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.78.86.130"
34.78.86.130 - - [26/Sep/ ...
show more
34.78.86.130 - - [26/Sep/2026:09:10:31 +0000] "GET /.env HTTP/1.1" 403 14405 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.78.86.130"
34.78.86.130 - - [26/Sep/2026:09:10:31 +0000] "GET /.env.local HTTP/1.1" 403 14405 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.78.86.130"
34.78.86.130 - - [26/Sep/2026:09:10:31 +0000] "GET /.env.production HTTP/1.1" 403 14405 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.78.86.130"
34.78.86.130 - - [26/Sep/2026:09:10:32 +0000] "GET /.env.staging HTTP/1.1" 403 14405 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.78.86.130"
34.78.86.130 - - [26/Sep/2026:09:10:32 +0000] "GET /.env.development HTTP/1
...
show less
Web App Attack
2026-09-25 17:01:16
(1 month ago)
Blocked by ModSec and CSF
Port Scan
🇺🇸
TPI-Abuse
2026-09-25 01:40:40
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.78.86.130 (130.86.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 21:40:33.167772 2026] [security2:error] [pid 4817:tid 493 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.86.130 (130.86.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 21:40:33.167772 2026] [security2:error] [pid 4817:tid 4938] [client 34.78.86.130:34934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blog.juantrece.com"] [uri "/.git/config"] [unique_id "arXREegZv6OZN0MkQH9WjQAAAlQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 18:44:22
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.78.86.130 (130.86.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:44:16.068462 2026] [security2:error] [pid 6862:tid 686 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.86.130 (130.86.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:44:16.068462 2026] [security2:error] [pid 6862:tid 6862] [client 34.78.86.130:37456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.okeetokee.org"] [uri "/.git/config"] [unique_id "arVvgGpPHrgAS2Gwbi93qgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 17:21:18
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.78.86.130 (130.86.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:21:13.151103 2026] [security2:error] [pid 18006:tid 18 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.86.130 (130.86.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:21:13.151103 2026] [security2:error] [pid 18006:tid 18006] [client 34.78.86.130:48824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ocmtx.org"] [uri "/.git/config"] [unique_id "arVcCVSdOT7sm2xJ2ype2QAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-09-23 08:50:17
(1 month ago)
[WedSep2310:50:10.7913712026][security2:error][pid1982249:tid1982303][client34.78.86.130:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htacce ...
show more
[WedSep2310:50:10.7913712026][security2:error][pid1982249:tid1982303][client34.78.86.130:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"bluwater.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"arOSwrwKiE-5iIMvz8TicgAAAFI\"]
show less
Port Scan
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-22 08:42:54
(1 month ago)
Excessive 404/403 errors
Brute-Force
2026-09-22 08:27:15
(1 month ago)
IP matched detection query many 3xx errors.
Brute-Force
2026-09-22 07:58:57
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-09-22 07:49:01
(1 month ago)
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.78.86.130 - - \[22/Sep/2026:09:48:43 +0200\] "GET /.git/config HTTP/1.1" 404 2156 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.3 ...
show more
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.78.86.130 - - \[22/Sep/2026:09:48:43 +0200\] "GET /.git/config HTTP/1.1" 404 2156 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
