🇺🇸
TPI-Abuse
2026-11-13 11:47:04
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.34.218.113 (113.218.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:47:01.061221 2026] [security2:error] [pid 7951:tid 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.218.113 (113.218.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:47:01.061221 2026] [security2:error] [pid 7951:tid 7951] [client 34.34.218.113:38994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jamelrobinson.com"] [uri "/.git/config"] [unique_id "avb4tRBYt2gEEZuq_4RhqwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:37:44
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.34.218.113 (113.218.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:37:41.093709 2026] [security2:error] [pid 10116:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.218.113 (113.218.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:37:41.093709 2026] [security2:error] [pid 10116:tid 10116] [client 34.34.218.113:60532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jadeiteholdings.com"] [uri "/.git/config"] [unique_id "avbodb4hO-XY6-drzftHSAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
rubixstudios
2026-11-13 09:36:02
UTC ·
(4 hours ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
iwle
2026-11-13 07:55:44
UTC ·
(5 hours ago)
[Fri Nov 13 02:55:41.158959 2026] [:error] [pid 1542:tid 1671] [client 34.34.218.113:39872] [client 34.34.218.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\ ...
show more
[Fri Nov 13 02:55:41.158959 2026] [:error] [pid 1542:tid 1671] [client 34.34.218.113:39872] [client 34.34.218.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "mail.iwle.com"] [uri "/.env"] [unique_id "avbCfV-HzGomoCREbmNThgAAAIs"]
[Fri Nov 13 02:55:42.126432 2026] [:error] [pid 7593:tid 7637] [client 34.34.218.113:50640] [client 34.34.218.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-13 07:12:31
UTC ·
(6 hours ago)
[ti-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.34.218.113 - - [13/Nov/2026:08:12:25 +0100] "GET /.git/config HTTP/1.1" 404 1370 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb ...
show more
[ti-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.34.218.113 - - [13/Nov/2026:08:12:25 +0100] "GET /.git/config HTTP/1.1" 404 1370 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
oralunal
2026-11-13 05:59:27
UTC ·
(7 hours ago)
Banned by Fail2Ban - access.log - mavifinds
Web App Attack
Bad Web Bot
🇨🇦
alexbfr
2026-11-13 05:56:38
UTC ·
(7 hours ago)
Fail2Ban report from nginx-bot-trap; service=HTTP; application_protocol=HTTP; observed_at=2026-11-13T05:56:38Z; last_observed_at=2026-11-13T05:56:39Z; reported_at=2026-11-13T05:56:40Z
matched_log_events=2; evidence_window_seconds=3600
2026-11-13T05:5 ...
show more
Fail2Ban report from nginx-bot-trap; service=HTTP; application_protocol=HTTP; observed_at=2026-11-13T05:56:38Z; last_observed_at=2026-11-13T05:56:39Z; reported_at=2026-11-13T05:56:40Z
matched_log_events=2; evidence_window_seconds=3600
2026-11-13T05:56:39Z activity=bot-trap request method=GET nginx_status=444 probe_target=/.env
2026-11-13T05:56:38Z activity=bot-trap request method=GET nginx_status=444 probe_target=/.env
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 05:22:04
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.34.218.113 (113.218.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:22:00.397128 2026] [security2:error] [pid 22538:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.218.113 (113.218.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:22:00.397128 2026] [security2:error] [pid 22538:tid 22538] [client 34.34.218.113:37116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.itimetable21.com"] [uri "/.git/config"] [unique_id "avaeeP9c-_QWh5DXGjWaUgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-11-13 05:14:42
UTC ·
(8 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
2026-11-13 05:11:38
UTC ·
(8 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
masterguru
2026-11-13 04:33:23
UTC ·
(9 hours ago)
Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})| (932130-164)
Hacking
🇩🇪
Hazzard
2026-11-13 04:14:21
UTC ·
(9 hours ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇺🇸
TPI-Abuse
2026-11-13 03:14:58
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.34.218.113 (113.218.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:14:50.814769 2026] [security2:error] [pid 11129:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.218.113 (113.218.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:14:50.814769 2026] [security2:error] [pid 11129:tid 11154] [client 34.34.218.113:50194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.isolomon.ai"] [uri "/.git/config"] [unique_id "avaAqrj02cKZ2-0CBCA_lQAAAI4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
svr
2026-11-13 02:58:58
UTC ·
(10 hours ago)
Abusive Automated Web Scanner
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 02:51:02
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.34.218.113 (113.218.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:50:55.591717 2026] [security2:error] [pid 5754:tid 5 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.218.113 (113.218.34.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:50:55.591717 2026] [security2:error] [pid 5754:tid 5754] [client 34.34.218.113:40838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.islanublarproperties.com"] [uri "/.git/config"] [unique_id "avZ7D-ZpjODNSXp7ZZPzMQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
