๐บ๐ธ
TPI-Abuse
2026-08-29 09:04:02
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.186.205.218 (218.205.186.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.205.218 (218.205.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 05:03:55.019483 2026] [security2:error] [pid 25005:tid 25005] [client 34.186.205.218:42510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.boat-registration-france.com.boatregistrationdelaware.com"] [uri "/app/.git/config"] [unique_id "apKge174cCUq1qFMlsbIyAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-08-29 08:10:03
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ซ๐ฎ
Mausteuuno
2026-08-29 07:14:00
(1 month ago)
Scans for vulnerable git files
34.186.205.218 - - [29/Aug/2026:07:14:09 +0000] "GET /htdocs/.git/co ...
show more
Scans for vulnerable git files
34.186.205.218 - - [29/Aug/2026:07:14:09 +0000] "GET /htdocs/.git/config HTTP/1.1" 500 4 "-" "crusader-worker/1.0"
34.186.205.218 - - [29/Aug/2026:07:14:09 +0000] "GET /backend/.git/config HTTP/1.1" 500 4 "-" "crusader-worker/1.0"
34.186.205.218 - - [29/Aug/2026:07:14:09 +0000] "GET /site/.git/config HTTP/1.1" 500 4 "-" "crusader-worker/1.0"
34.186.205.218 - - [29/Aug/2026:07:14:09 +0000] "GET /wordpress/.git/config HTTP/1.1" 500 4 "-" "crusader-worker/1.0"
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-08-29 01:33:33
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.186.205.218 (218.205.186.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.205.218 (218.205.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 21:33:27.805572 2026] [security2:error] [pid 30961:tid 30961] [client 34.186.205.218:37372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matterofbritain.com"] [uri "/htdocs/.git/config"] [unique_id "apI252siFxvCxApzhNxXSQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-29 00:26:04
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.186.205.218 (218.205.186.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.205.218 (218.205.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:26:01.586267 2026] [security2:error] [pid 106473:tid 106488] [client 34.186.205.218:50608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.naiveromantic.merart.com"] [uri "/public/.git/config"] [unique_id "apInGQT0nhezPdooEOmYfQAAAMs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-08-28 20:39:54
(1 month ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 19:26:07
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.186.205.218 (218.205.186.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.205.218 (218.205.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 15:26:02.215863 2026] [security2:error] [pid 5218:tid 5218] [client 34.186.205.218:51466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stage.dtla2028.com"] [uri "/.git/config"] [unique_id "apHgyvvKhcaz39TnQW7i4gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
iNetWorker
2026-08-28 17:45:05
(1 month ago)
trolling for resource vulnerabilities
Web App Attack
๐ฉ๐ช
XICTRON
2026-08-28 14:10:07
(1 month ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
๐ง๐พ
lns.bz
2026-08-28 13:26:11
(1 month ago)
Too many 404 requests [BY]
Web App Attack
๐ฌ๐ง
consul.to
2026-08-28 12:24:27
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-08-28 11:50:02
(1 month ago)
suspicious request in access.log
Web App Attack
๐บ๐ธ
OceanTreasure
2026-08-28 11:07:22
(1 month ago)
tcp/443; Git configuration exposure attempt: "GET /app/.git/config" @ 2026-08-28T11:00:58Z [proxy]
Web App Attack
๐บ๐ธ
mnsf
2026-08-28 00:06:09
(1 month ago)
Scanning/Probing (48)
Brute-Force
Web App Attack
๐ณ๐ฑ
Eric
2026-08-27 22:04:34
(1 month ago)
[Thu Aug 27 22:04:34.021270 2026] [security2:error] [pid 3756078:tid 3756078] [client 34.186.205.218 ...
show more
[Thu Aug 27 22:04:34.021270 2026] [security2:error] [pid 3756078:tid 3756078] [client 34.186.205.218:41204] [client 34.186.205.218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "94-209-38-171.cable.dynamic.v4.ziggo.nl"] [uri "/wordpress/.git/config"] [unique_id "apC0cmSD9cWeSDy5wy1KRAAAAA4"]
[Thu Aug 27 22:04:34.034961 2026] [security2:error] [pid 3730303:tid 3730303] [client 34.186.205.218:41282] [client 34.186.205.218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound
...
show less
Hacking
Web App Attack