๐ณ๐ฑ
Alt255
2026-09-21 00:16:12
(1 week ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.39.81.2 - - [21/Sep/2026:02:16:05 +0200] "GET /.git/config HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 23:58:01
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 19:57:55.178142 2026] [security2:error] [pid 32754:tid 32754] [client 34.39.81.2:52590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrsreclamation.com"] [uri "/.git/config"] [unique_id "arBzA_NFlasyq1nogX5UOgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 22:00:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 18:00:09.514910 2026] [security2:error] [pid 9561:tid 9561] [client 34.39.81.2:60126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrpinman.com"] [uri "/.git/config"] [unique_id "arBXadfGGefdo5LHv4wFIwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
debestelapp
2026-09-20 22:00:13
(1 week ago)
Web App Attack
๐ฌ๐ง
oja
2026-09-20 21:21:20
(1 week ago)
Aggressive web scanner
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 21:14:49
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 17:14:44.626538 2026] [security2:error] [pid 17484:tid 17484] [client 34.39.81.2:35152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrobertdesignbuild.com"] [uri "/.git/config"] [unique_id "arBMxOk_9pBstZdxamYwqgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
oh.mg
2026-09-20 20:27:57
(1 week ago)
[Sun Sep 20 22:27:56.569970 2026] [security2:error] [pid 1136672:tid 1136697] [client 34.39.81.2:0] ...
show more
[Sun Sep 20 22:27:56.569970 2026] [security2:error] [pid 1136672:tid 1136697] [client 34.39.81.2:0] [client 34.39.81.2] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "eu.mmn.ca"] [uri "/"] [unique_id "arBBzEGZmhfsWioQMz7WYwAAAVc"]
[Sun Sep 20 22:27:56.741787 2026] [security2:error] [pid 1136672:tid 1136698] [client 34.39.81.2:0] [client 34.39.81.2] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag
...
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-20 18:33:28
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 14:33:20.554837 2026] [security2:error] [pid 18335:tid 18335] [client 34.39.81.2:54382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrgutierrezshow.com"] [uri "/.git/config"] [unique_id "arAm8K7kFfrpPQMovrmvpwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 17:55:09
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 13:55:01.542820 2026] [security2:error] [pid 3826:tid 3826] [client 34.39.81.2:40496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrflatpeople.com"] [uri "/.git/config"] [unique_id "arAd9VWdLHBr1mxCylAFSwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
middelkoopcc
2026-09-20 17:39:01
(1 week ago)
2026-09-20 19:34:23 GET /.git/config [404] && 2026-09-20 19:34:25 GET /.env [404] && 2026-09-20 19:3 ...
show more
2026-09-20 19:34:23 GET /.git/config [404] && 2026-09-20 19:34:25 GET /.env [404] && 2026-09-20 19:34:34 GET /.env.bak [404] && 126 more within 20 minutes
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 17:35:39
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 13:35:31.644471 2026] [security2:error] [pid 32684:tid 32684] [client 34.39.81.2:60276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrepoch.art"] [uri "/.git/config"] [unique_id "arAZYwY_pRPzEm-HAiFgWQAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-20 17:20:04
(1 week ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ณ๐ฑ
ConsulHosting
2026-09-20 17:10:53
(1 week ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 16:26:12
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 12:26:05.737060 2026] [security2:error] [pid 25306:tid 25306] [client 34.39.81.2:60214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrconway.com"] [uri "/.git/config"] [unique_id "arAJHT6Ln5a7Z4UVCd1g7AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 16:02:07
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.81.2 (2.81.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 12:01:59.937999 2026] [security2:error] [pid 3028769:tid 3028769] [client 34.39.81.2:56630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrcd.org"] [uri "/.git/config"] [unique_id "arADd6xan5X4J0Ao3WxHnwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack