๐บ๐ธ
TPI-Abuse
2026-06-26 02:18:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.104.218.180 (180.218.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.218.180 (180.218.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 22:18:01.629717 2026] [security2:error] [pid 31063:tid 31063] [client 34.104.218.180:51430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stgeorgellc.com"] [uri "/app/.git/config"] [unique_id "aj3hWYAp9V_tXobTjb_pggAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-06-26 01:52:36
(1 day ago)
20 attempts against mh-misbehave-ban on ec102967
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
pscriptos
2026-06-26 01:46:40
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ซ๐ท
masterguru
2026-06-26 01:43:40
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 01:33:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.104.218.180 (180.218.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.218.180 (180.218.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:33:12.320358 2026] [security2:error] [pid 30093:tid 30093] [client 34.104.218.180:51596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vincetronics.com"] [uri "/.git/config"] [unique_id "aj3W2FzEpBVLk3jwPbREpwAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐พ
Rizzy
2026-06-26 01:21:34
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-06-26 01:14:51
(1 day ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 00:12:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.104.218.180 (180.218.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.218.180 (180.218.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 20:12:43.819818 2026] [security2:error] [pid 27418:tid 27418] [client 34.104.218.180:58396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.brodericktourville.com"] [uri "/src/.git/config"] [unique_id "aj3D-0iqP0-WyE15tKWWKwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
netclix.gr
2026-06-25 23:21:10
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.104.218.180 (JP/Japan/180.218.104.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.104.218.180 (JP/Japan/180.218.104.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-06-25 23:13:51
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.104.218.180 (180.218.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.218.180 (180.218.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 19:13:47.323012 2026] [security2:error] [pid 27849:tid 27849] [client 34.104.218.180:43910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.nematoads.com"] [uri "/blog/.git/config"] [unique_id "aj22KyYAm8jB-xjFDwk9JwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Savvii
2026-06-25 18:18:35
(1 day ago)
20 attempts against mh-misbehave-ban on train
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
kuj
2026-06-25 17:35:34
(1 day ago)
2026-06-25T11:35:33.754578-06:00 derpamp-oci derper[287106]: 2026/06/25 11:35:33 http: TLS handshake ...
show more
2026-06-25T11:35:33.754578-06:00 derpamp-oci derper[287106]: 2026/06/25 11:35:33 http: TLS handshake error from 34.104.218.180:59102: acme/autocert: missing server name
2026-06-25T11:35:33.757958-06:00 derpamp-oci derper[287106]: 2026/06/25 11:35:33 http: TLS handshake error from 34.104.218.180:59108: acme/autocert: missing server name
2026-06-25T11:35:33.768587-06:00 derpamp-oci derper[287106]: 2026/06/25 11:35:33 http: TLS handshake error from 34.104.218.180:59112: acme/autocert: missing server name
...
show less
Port Scan
Brute-Force
๐ซ๐ท
Catalin Negru
2026-06-25 17:13:05
(1 day ago)
2026-06-25 20:13:03,939 fail2ban.actions [2945670]: NOTICE [apache-scan] Ban 34.104.218.180
...
show more
2026-06-25 20:13:03,939 fail2ban.actions [2945670]: NOTICE [apache-scan] Ban 34.104.218.180
2026-06-25 20:13:04,268 fail2ban.actions [2945670]: NOTICE [apache-dirscan] Ban 34.104.218.180
2026-06-25 20:13:04,299 fail2ban.actions [2945670]: NOTICE [web-scanner] Ban 34.104.218.180
2026-06-25 20:13:04,478 fail2ban.actions [2945670]: NOTICE [apache-security] Ban 34.104.218.180
2026-06-25 20:13:04,586 fail2ban.actions [2945670]: NOTICE [apache-404] Ban 34.104.218.180
...
show less
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-06-25 15:17:19
(1 day ago)
Multiple WAF Violations
Web App Attack