π³π±
Alt255
2026-09-29 18:28:40
(5 days ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.57.133.194 - - \[29/Sep/2026:20:28:35 +0200\] "GET /.git/config HTTP/1.1" 301 599 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
π¦πΊ
2000cn.com.au
2026-09-29 05:45:56
(6 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
πΊπΈ
gamabe
2026-09-29 05:17:10
(6 days ago)
Detected crowdsecurity/http-sensitive-files attack pattern. Reported by CrowdSec IDS.
Hacking
πΊπΈ
TPI-Abuse
2026-09-28 07:54:55
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 03:54:47.253868 2026] [security2:error] [pid 18884:tid 18884] [client 34.57.133.194:53466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "disio.com"] [uri "/.git/config"] [unique_id "arodR7iupslXwiRLvh9tbAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-28 06:53:19
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 02:53:13.779888 2026] [security2:error] [pid 9693:tid 9693] [client 34.57.133.194:60322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scrunchiebuttbikinis.com"] [uri "/.git/config"] [unique_id "aroO2ZGrrARtRJcBi3K7IgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
dynamix
2026-09-28 05:52:19
(1 week ago)
Multiple WAF Violations
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-28 05:33:42
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 01:33:39.000878 2026] [security2:error] [pid 16903:tid 16903] [client 34.57.133.194:51076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scrollingelements.fernfieldbrooks.com"] [uri "/.git/config"] [unique_id "arn8MtBGSALPH4PoK58dAgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Savvii
2026-09-27 16:52:07
(1 week ago)
20 attempts against mh_ha-misbehave-ban on argon
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
on-com
2026-09-26 22:08:00
(1 week ago)
URL scan
Brute-Force
Web App Attack
π¬π§
stevendodd
2026-09-25 21:06:13
(1 week ago)
34.57.133.194 - - [25/Sep/2026:22:06:11 +0100] "GET /.git/config HTTP/1.1" 404 447 "-" "Mozilla/5.0 ...
show more
34.57.133.194 - - [25/Sep/2026:22:06:11 +0100] "GET /.git/config HTTP/1.1" 404 447 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.57.133.194 - - [25/Sep/2026:22:06:11 +0100] "GET /.env HTTP/1.1" 404 447 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.57.133.194 - - [25/Sep/2026:22:06:11 +0100] "GET /.env.local HTTP/1.1" 404 447 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.57.133.194 - - [25/Sep/2026:22:06:11 +0100] "GET /.env.production HTTP/1.1" 404 447 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.57.133.194 - - [25/Sep/2026:22:06:12 +0100] "GET /.env.staging HTTP/1.1" 404 447 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.57.133.194 - - [25/Sep/2026:22:06:12 +0100] "
...
show less
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-24 20:50:09
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 16:50:03.611092 2026] [security2:error] [pid 23022:tid 23022] [client 34.57.133.194:48196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.intnlc.org"] [uri "/.git/config"] [unique_id "arWM-0k4dGrnIOH3xHFP3wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-24 20:31:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 16:31:22.296684 2026] [security2:error] [pid 29459:tid 29459] [client 34.57.133.194:36792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.intertecs.org"] [uri "/.git/config"] [unique_id "arWImgnzN9pE0bx6Lo437wAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-24 19:43:20
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 15:43:15.636158 2026] [security2:error] [pid 7316:tid 7336] [client 34.57.133.194:48860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.internationalbusinessschool.org"] [uri "/.git/config"] [unique_id "arV9U1ZEwBGzjUVxHmSWlAAAAQQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-24 19:16:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.133.194 (194.133.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 15:16:08.382692 2026] [security2:error] [pid 24217:tid 24217] [client 34.57.133.194:38878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.interculturaldimensions.org"] [uri "/.git/config"] [unique_id "arV2-K68rY6538bmG9rmJAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
ger-stg-sifi1
2026-09-24 17:59:47
(1 week ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack