Anonymous
2026-10-14 04:52:09
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ธ
dot.mg
2026-10-14 01:39:01
(3 days ago)
Bruteforce
Bad Web Bot
Anonymous
2026-10-13 20:07:03
(3 days ago)
Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-10-13 19:07:56.
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-16 10:18:47
(1 month ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.92.254.2 - - [16/Sep/2026:12:18:27 +0200] "GET /.git/config HTTP/1.1" 200 2828 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 09:26:03
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.92.254.2 (2.254.92.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.254.2 (2.254.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 05:25:54.998059 2026] [security2:error] [pid 9687:tid 9687] [client 34.92.254.2:55088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.statevictoryfund.progressivefileshare.org"] [uri "/.git/config"] [unique_id "aqpgolLuqZnoaMigCp2_bAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 07:53:12
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.92.254.2 (2.254.92.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.254.2 (2.254.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:53:05.273421 2026] [security2:error] [pid 25994:tid 26004] [client 34.92.254.2:46790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.starwars.onernet.com"] [uri "/.git/config"] [unique_id "aqpK4ZaBb3B9pk5FtOfXngAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-09-16 06:25:03
(1 month ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 04:43:59
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.92.254.2 (2.254.92.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.254.2 (2.254.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 00:43:56.346847 2026] [security2:error] [pid 6612:tid 6612] [client 34.92.254.2:52750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.start2invent.com.stlouisdave.com"] [uri "/.git/config"] [unique_id "aqoejIcZSXs89wwbDGh26QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-16 04:15:04
(1 month ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 04:09:28
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.92.254.2 (2.254.92.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.254.2 (2.254.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 00:09:23.881647 2026] [security2:error] [pid 10489:tid 10489] [client 34.92.254.2:46964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.starshipcapricorn.mroxygen.org"] [uri "/.git/config"] [unique_id "aqoWcydxkYadpL4Iya2W1QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-16 02:59:11
(1 month ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
oisecnet
2026-09-15 21:02:37
(1 month ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-09-15. 503 requests from this ...
show more
Automated report: Unauthorized vulnerability scanning detected on 2026-09-15. 503 requests from this IP.
show less
Port Scan
Hacking
Web App Attack
๐ฉ๐ช
kkw
2026-09-15 20:17:27
(1 month ago)
[REDACTED] 34.92.254.2 - - [15/Sep/2026:22:17:26 +0200] "GET /.git/config HTTP/1.1" 404 558 "-" "Moz ...
show more
[REDACTED] 34.92.254.2 - - [15/Sep/2026:22:17:26 +0200] "GET /.git/config HTTP/1.1" 404 558 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
... (mode: searching http-sensitive-files)
show less
Bad Web Bot
Web App Attack
๐ฉ๐ฐ
toolbit.online
2026-09-15 18:35:56
(1 month ago)
CrowdSec detected automated web reconnaissance from this IP - 11 suspicious requests observed. Class ...
show more
CrowdSec detected automated web reconnaissance from this IP - 11 suspicious requests observed. Classified as automated probing for exposed files / admin panels (scenario "http-probing", in our own server logs). Behavioural detection, auto-banned at the firewall.
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 11:36:32
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.92.254.2 (2.254.92.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.254.2 (2.254.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:36:25.594772 2026] [security2:error] [pid 863848:tid 863848] [client 34.92.254.2:47654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.okapi.ic1.biz"] [uri "/.git/config"] [unique_id "aqktueBYbsoqQ4qW8so13QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack