πΊπΈ
TPI-Abuse
2026-09-29 00:22:51
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.67.134.177 (177.134.67.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.134.177 (177.134.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:22:45.307864 2026] [security2:error] [pid 27759:tid 27759] [client 34.67.134.177:50150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.theforeverestate.com"] [uri "/.git/config"] [unique_id "arsE1UTbpYAvBS89PZhl9QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-28 04:42:45
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.67.134.177 (177.134.67.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.134.177 (177.134.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 00:42:40.283138 2026] [security2:error] [pid 19840:tid 19840] [client 34.67.134.177:35880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "urlpick.com"] [uri "/.git/config"] [unique_id "arnwQOmRTeNy4zrpADtkZwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
todix
2026-09-28 03:30:07
(3 weeks ago)
Web App Attack Exploid from 34.67.134.177
Web App Attack
π©πͺ
LRob
2026-09-26 23:35:08
(3 weeks ago)
This address is enumerating paths that do not exist on our sites β asking for scripts, plugins, admi ...
show more
This address is enumerating paths that do not exist on our sites β asking for scripts, plugins, admin consoles or endpoints the sites never had, one after another. This is vulnerability scanning: looking for something to exploit. Blocked; please check the machine behind it for a scanner or malware. | method: GET | path: /.git/config (+6 more) | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | 2026-09-26 23:35 UTC
show less
Port Scan
Web App Attack
π³π±
Alt255
2026-09-26 22:13:47
(3 weeks ago)
[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.67.134.177 - - [27/Sep/2026:00:13:31 +0200] "GET /.git/config HTTP/1.1" 301 546 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
π«π·
dynamix
2026-09-26 20:30:00
(3 weeks ago)
Multiple WAF Violations
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-26 20:18:07
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.67.134.177 (177.134.67.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.134.177 (177.134.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 16:18:03.953732 2026] [security2:error] [pid 8163:tid 8163] [client 34.67.134.177:46778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.agelessoutcomes.com"] [uri "/.git/config"] [unique_id "argoe5CkWMGkqXCFkT6uhgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
mnsf
2026-09-26 14:05:35
(4 weeks ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
πΊπΈ
kadour
2026-09-26 11:03:33
(4 weeks ago)
[Sat Sep 26 06:03:31.859404 2026] [proxy_fcgi:error] [pid 2567:tid 2688] [client 34.67.134.177:59330 ...
show more
[Sat Sep 26 06:03:31.859404 2026] [proxy_fcgi:error] [pid 2567:tid 2688] [client 34.67.134.177:59330] AH01071: Got error 'Primary script unknown'
[Sat Sep 26 06:03:31.908110 2026] [proxy_fcgi:error] [pid 2567:tid 2697] [client 34.67.134.177:59330] AH01071: Got error 'Primary script unknown'
[Sat Sep 26 06:03:31.958204 2026] [proxy_fcgi:error] [pid 2567:tid 2713] [client 34.67.134.177:59330] AH01071: Got error 'Primary script unknown'
[Sat Sep 26 06:03:32.009863 2026] [proxy_fcgi:error] [pid 2567:tid 2701] [client 34.67.134.177:59330] AH01071: Got error 'Primary script unknown'
[Sat Sep 26 06:03:32.057346 2026] [proxy_fcgi:error] [pid 2567:tid 2712] [client 34.67.134.177:59330] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack
π³π±
Site.eu
2026-09-25 23:00:55
(4 weeks ago)
Excessive 404/403 errors
Brute-Force
πΊπΈ
TPI-Abuse
2026-09-24 19:31:08
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.67.134.177 (177.134.67.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.134.177 (177.134.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 15:31:04.674177 2026] [security2:error] [pid 4429:tid 4467] [client 34.67.134.177:36174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bronnimann.org"] [uri "/.git/config"] [unique_id "arV6eHHShWwDER0XR_SqOAAAAVg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-24 18:52:04
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.67.134.177 (177.134.67.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.134.177 (177.134.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:51:58.356012 2026] [security2:error] [pid 27913:tid 27913] [client 34.67.134.177:36382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.brojon.mroxygen.org"] [uri "/.git/config"] [unique_id "arVxTpqcN7uCS3yj5hnaBwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Site.eu
2026-09-24 14:07:08
(1 month ago)
Excessive 404/403 errors
Brute-Force
πͺπΈ
pipeline.es
2026-09-24 08:58:10
(1 month ago)
Web scanning / probing for vulnerable paths
Port Scan
Web App Attack
π©πͺ
big-cloud.nl
2026-09-24 02:49:45
(1 month ago)
Try to access /.git/config
Web App Attack