๐ฆ๐บ
paulshipley.com.au
2026-09-21 23:58:24
(5 minutes ago)
[Tue Sep 22 09:58:23.791530 2026] [security2:error] [pid 172988] [client 34.22.52.3:38896] [client 3 ...
show more
[Tue Sep 22 09:58:23.791530 2026] [security2:error] [pid 172988] [client 34.22.52.3:38896] [client 34.22.52.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "whoson2day.com"] [uri "/.git/config"] [unique_id "arHEn6e2jZa3fSxKrceKZAAAAAU"]
...
show less
Web App Attack
๐ฉ๐ช
Blexyel
2026-09-21 23:56:27
(7 minutes ago)
34.22.52.3 - - [22/Sep/2026:01:56:26 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "-" "pingusmc.or ...
show more
34.22.52.3 - - [22/Sep/2026:01:56:26 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "-" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 23:52:42
(11 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.22.52.3 (3.52.22.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.52.3 (3.52.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:52:38.394107 2026] [security2:error] [pid 27404:tid 27404] [client 34.22.52.3:50590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wholesalelivelobsters.com"] [uri "/.git/config"] [unique_id "arHDRmrPhUljrIs7bgM-MgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
MyGlobalFlowers
2026-09-21 23:44:07
(19 minutes ago)
Multiple WAF Violations
Web App Attack
๐ท๐ด
clauss
2026-09-21 23:11:28
(52 minutes ago)
34.22.52.3 - - [22/Sep/2026:02:11:27 +0300] "GET /.git/config HTTP/1.1" 403 29 "-" "-"
34.22.52.3 - ...
show more
34.22.52.3 - - [22/Sep/2026:02:11:27 +0300] "GET /.git/config HTTP/1.1" 403 29 "-" "-"
34.22.52.3 - - [22/Sep/2026:02:11:27 +0300] "GET /.git/config HTTP/1.1" 403 29 "-" "-"
...
show less
Web App Attack
Anonymous
2026-09-21 22:36:02
(1 hour ago)
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web s ...
show more
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-21 20:18:41
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.52.3 (3.52.22.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.52.3 (3.52.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 16:18:36.116366 2026] [security2:error] [pid 17987:tid 17987] [client 34.22.52.3:60254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.495metro.com"] [uri "/.git/config"] [unique_id "arGRHK2d6XkKNPOGz6Nq9AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 19:51:27
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.52.3 (3.52.22.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.52.3 (3.52.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 15:51:20.125011 2026] [security2:error] [pid 9661:tid 9661] [client 34.22.52.3:56604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.415test.com"] [uri "/.git/config"] [unique_id "arGKuNX3ed3GNk3NTDhsTgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-21 19:49:02
(4 hours ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
๐ง๐ช
cmbplf
2026-09-21 19:45:30
(4 hours ago)
1.116 requests with url.path */.git/config
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-21 18:53:47
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.52.3 (3.52.22.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.52.3 (3.52.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:53:43.693259 2026] [security2:error] [pid 22392:tid 22392] [client 34.22.52.3:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.365soft.top"] [uri "/.git/config"] [unique_id "arF9N0ntRdGoxfPn_lmxfQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 18:33:37
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.52.3 (3.52.22.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.52.3 (3.52.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:33:30.103072 2026] [security2:error] [pid 24577:tid 24577] [client 34.22.52.3:44890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.333w88.com"] [uri "/.git/config"] [unique_id "arF4ejzzXog-xV-cQOJQWAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-21 17:25:31
(6 hours ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.22.52.3 - - \[21/Sep/2026:19:25:13 +0200\] "GET /.git/config HTTP/1.1" 404 93680 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 17:24:31
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.52.3 (3.52.22.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.52.3 (3.52.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 13:24:23.685224 2026] [security2:error] [pid 20331:tid 20331] [client 34.22.52.3:57050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.chaosstaffing.apfarrell.com"] [uri "/.git/config"] [unique_id "arFoR-VVnbzNouZab6h7JgAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-09-21 17:05:33
(6 hours ago)
Abuse Detected (11)
Brute-Force
Web App Attack