|
🇮🇹
CoreTech srl
|
|
cloudlinux2 fail2ban: 2026-11-03 17:19:32,650 fail2ban.filter [1898]: INFO [recidive] Found 34.14.132.89 - 2026-11-03 17:19:32cloudlinux2 fail2ban: 2026-11-03 17:19:32,541 fail2ban.filter [1898]: INFO [plesk-modsecurity] Found 3 ...
show more
cloudlinux2 fail2ban: 2026-11-03 17:19:32,650 fail2ban.filter [1898]: INFO [recidive] Found 34.14.132.89 - 2026-11-03 17:19:32cloudlinux2 fail2ban: 2026-11-03 17:19:32,541 fail2ban.filter [1898]: INFO [plesk-modsecurity] Found 34.14.132.89 - 2026-11-03 17:19:32cloudlinux2 fail2ban: 2026-11-03 17:19:32,570 fail2ban.filter [1898]: INFO [plesk-modsecurity] Found 34.14.132.89 - 2026-11-03 17:19:32cloudlinux2 fail2ban: 2026-11-03 17:19:32,551 fail2ban.filter [1898]: INFO [plesk-modsecurity] Found 34.14.132.89 - 2026-11-03 17:19:32cloudlinux2 fail2ban: 2026-11-03 17:19:32,648 fail2ban.actions [1898]: NOTICE [plesk-modsecurity] Ban 34.14.132.89cloudlinux2 fail2ban: 2026-11-03 17:20:05,430 fail2ban.filter [1898]: INFO [plesk-modsecurity] Found 34.79.17.94 - 2026-11-03 17:20:05cloudlinux2 fail2ban: 2026-11-03 17:20:05,611 fail2ban.filter [1898]: INFO [plesk-modsecurity] Found 34.79.17.94 - 2026-11-03 17:20:05cloudlinux2 fail2ban: 2026-11-03 17:2
show less
|
Brute-Force
|
|
🇸🇪
vaia.cloud
|
|
crowdsecurity/http-admin-interface-probing
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
IP matched detection query 50 and more bad rqs apache.
|
Hacking
Bad Web Bot
Brute-Force
Web App Attack
|
|
🇳🇱
Alt255
|
|
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.14.132.89 - - [03/Nov/2026:08:57:50 +0100] "GET /.git/config HTTP/1.1" 404 537 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, ...
show more
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.14.132.89 - - [03/Nov/2026:08:57:50 +0100] "GET /.git/config HTTP/1.1" 404 537 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IN, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
francelink.fr
|
|
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-03T02:46:10.000Z.
|
Web App Attack
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.14.132.89 (89.132.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 16:49:44.700214 2026] [security2:error] [pid 1708866:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.132.89 (89.132.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 16:49:44.700214 2026] [security2:error] [pid 1708866:tid 1708877] [client 34.14.132.89:48122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mentzclan.com"] [uri "/.git/config"] [unique_id "aukFeIu97HfMvk6dXw_OzAAAAIY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇭
Origon
|
|
plesk-modsecurity - IP: 34.14.132.89 - [02/Nov/2026:22:27:34.342772 +0100] aukARpvYruis2Bdp8Vw1lAAAAIM 34.14.132.89 32774 127.0.0.1 7081 [02/Nov/2026:22:27:34.624255 +0100] aukARpvYruis2Bdp8Vw1lgAAAJA 34.14.132.89 32788 127.0.0.1 7081 [02/Nov/2026:2 ...
show more
plesk-modsecurity - IP: 34.14.132.89 - [02/Nov/2026:22:27:34.342772 +0100] aukARpvYruis2Bdp8Vw1lAAAAIM 34.14.132.89 32774 127.0.0.1 7081 [02/Nov/2026:22:27:34.624255 +0100] aukARpvYruis2Bdp8Vw1lgAAAJA 34.14.132.89 32788 127.0.0.1 7081 [02/Nov/2026:22:27:34.757402 +0100] aukARrv9wSv9UKbJAoWKsAAAAAg 34.14.132.89 32796 127.0.0.1 7081 [02/Nov/2026:22:27:34.890712 +0100] aukARrv9wSv9UKbJAoWKsQAAABc 34.14.132.89 32800 127.0.0.1 7081
show less
|
Web App Attack
|
|
🇦🇺
2000cn.com.au
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Web App Attack
Hacking
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.14.132.89 (89.132.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 07:51:54.185191 2026] [security2:error] [pid 20723:tid 20 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.132.89 (89.132.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 07:51:54.185191 2026] [security2:error] [pid 20723:tid 20723] [client 34.14.132.89:47852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "meltonspace.com"] [uri "/.git/config"] [unique_id "auiHam8uYF-W_JObmpD0bAAAACA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇺
A.i.D.A.N.N
|
|
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web application attack detected
|
Web App Attack
|
|
🇺🇸
Sonoflet
|
|
CrowdSec detection | scenario: appsec-vpatch
|
Web App Attack
|
