🇺🇸
TPI-Abuse
2026-10-27 08:56:45
(9 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.85.236.43 (43.236.85.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.236.43 (43.236.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 04:56:38.825388 2026] [security2:error] [pid 29207:tid 29207] [client 34.85.236.43:54728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "handmrenovationsllc.com"] [uri "/.git/config"] [unique_id "auBnRkOhuSSzG5BxcLR1EwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 08:10:14
(55 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.85.236.43 (43.236.85.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.236.43 (43.236.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 04:10:07.968544 2026] [security2:error] [pid 9156:tid 9156] [client 34.85.236.43:14102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.furballproductions.org"] [uri "/.git/config"] [unique_id "auBcX8UHHm583d07acxY-wAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 06:11:12
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.85.236.43 (43.236.85.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.236.43 (43.236.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 02:11:08.624708 2026] [security2:error] [pid 15156:tid 15156] [client 34.85.236.43:29290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dashboard.alitcogroup.com"] [uri "/.git/credentials"] [unique_id "auBAfKyf39gOtJ8Cpsl4OwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-27 05:04:12
(4 hours ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.85.236.43 - - [27/Oct/2026:06:03:58 +0100] "GET /.git/config HTTP/1.1" 301 6271 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Brave/135"
...
show less
Bad Web Bot
Web App Attack
2026-10-27 04:42:47
(4 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
2026-10-27 02:22:23
(6 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
mw
2026-10-27 00:01:14
(9 hours ago)
GET /.env HTTP/1.1
Web App Attack
2026-10-26 23:42:02
(9 hours ago)
Bot / scanning and/or hacking attempts: GET /.env.backup HTTP/1.1, GET /.env.dev HTTP/1.1
Hacking
Web App Attack
🇳🇱
Savvii
2026-10-26 23:20:48
(9 hours ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
KTSTechnology
2026-10-26 23:06:17
(9 hours ago)
Web vulnerability scanning detected by our ISP firewall
Web App Attack
2026-10-26 22:56:40
(10 hours ago)
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, Bad ...
show more
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=24,9, Diversity=10, CanaryOverride=90.
show less
Web App Attack
Bad Web Bot
2026-10-26 22:19:29
(10 hours ago)
Aggressive web scan
Web App Attack
🇺🇸
IndigoRidge
2026-10-26 21:48:10
(11 hours ago)
34.85.236.43 - - [26/Oct/2026:17:47:08 -0400] "GET /.git/config HTTP/1.1" 404 5965 "-" "Mozilla/5.0 ...
show more
34.85.236.43 - - [26/Oct/2026:17:47:08 -0400] "GET /.git/config HTTP/1.1" 404 5965 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 26_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
34.85.236.43 - - [26/Oct/2026:17:47:47 -0400] "GET /.env HTTP/1.1" 404 5965 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 26_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
34.85.236.43 - - [26/Oct/2026:17:48:10 -0400] "GET /.aws/credentials HTTP/1.1" 404 5965 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 26_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 21:46:13
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.85.236.43 (43.236.85.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.236.43 (43.236.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 17:46:09.036837 2026] [security2:error] [pid 24262:tid 24262] [client 34.85.236.43:14248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.reconsideringfear.com.greighhouse.com"] [uri "/.git/config"] [unique_id "at_KIR01hqzm5rWpOYI7OQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 21:18:34
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.85.236.43 (43.236.85.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.236.43 (43.236.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 17:18:26.799474 2026] [security2:error] [pid 7555:tid 7653] [client 34.85.236.43:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billgiegold.com"] [uri "/.git/config"] [unique_id "at_DopP5JRWFtRMhnW1JWwAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack