🇫🇷
dynamix
2026-09-26 20:34:08
(7 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 15:37:29
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.101.38.76 (76.38.101.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.38.76 (76.38.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:37:24.161137 2026] [security2:error] [pid 8283:tid 8388] [client 34.101.38.76:58998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.arthansl.com"] [uri "/.git/config"] [unique_id "arfmtLVWrzD0sRLe2WwRQAAAARA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 14:38:19
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.101.38.76 (76.38.101.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.38.76 (76.38.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 10:38:15.156321 2026] [security2:error] [pid 2403:tid 2403] [client 34.101.38.76:51442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.arteseros.com"] [uri "/.git/config"] [unique_id "arfY1wQMr7XgfU2pIZytvAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-26 12:40:18
(15 hours ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Site.eu
2026-09-25 04:58:41
(1 day ago)
Excessive multi-domain requests
Brute-Force
2026-09-24 20:10:28
(2 days ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/phpinfo.php
Web App Attack
🇳🇱
maxxsense
2026-09-24 14:19:26
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.101.38.76 (ID/Indonesia/76.38.101.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.101.38.76 (ID/Indonesia/76.38.101.34.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-09-24 07:13:06
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.101.38.76 (76.38.101.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.38.76 (76.38.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 03:13:00.975473 2026] [security2:error] [pid 18157:tid 18157] [client 34.101.38.76:46308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.travelto.anthonyjoseph.us"] [uri "/.git/config"] [unique_id "arTNfEoTjiRDH5DBMCSAcAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-09-24 01:10:33
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-09-23 09:43:56
(3 days ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.101.38.76 - - \[23/Sep/2026:11:43:51 +0200\] "GET /.git/config HTTP/1.1" 301 556 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-22 11:01:08
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇫🇷
dynamix
2026-09-22 08:59:28
(4 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 02:04:59
(5 days ago)
(mod_security) mod_security (id:949110) triggered by 34.101.38.76 (76.38.101.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:949110) triggered by 34.101.38.76 (76.38.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 22:04:51.742370 2026] [security2:error] [pid 10531:tid 10531] [client 34.101.38.76:35564] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.tnc.cescfoundation.org"] [uri "/.git/config"] [unique_id "arHiQ8LKxgRfHwRAvJlhfwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 01:38:14
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.101.38.76 (76.38.101.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.38.76 (76.38.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 21:38:09.958445 2026] [security2:error] [pid 6388:tid 6388] [client 34.101.38.76:39272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.travel.enchantmenttours.com"] [uri "/.git/config"] [unique_id "arHcAeaPESvzgRBZwryaFAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-21 23:26:45
(5 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
