πΊπΈ
TPI-Abuse
2026-09-21 20:37:00
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.97.187.242 (242.187.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.187.242 (242.187.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 16:36:53.552607 2026] [security2:error] [pid 30983:tid 30983] [client 34.97.187.242:40074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.4211swf.com.micahgartman.com"] [uri "/.git/config"] [unique_id "arGVZbPY-JEyIwtiMbQb0gAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-21 19:56:32
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.187.242 (242.187.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.187.242 (242.187.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 15:56:27.412264 2026] [security2:error] [pid 24829:tid 24891] [client 34.97.187.242:40616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.41bravo.workconfident.com"] [uri "/.git/config"] [unique_id "arGL6_6oYW8iz4CI3YvE_AAAAUA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-21 18:49:43
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.187.242 (242.187.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.187.242 (242.187.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:49:39.448077 2026] [security2:error] [pid 25965:tid 25965] [client 34.97.187.242:47798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.4115.abecasis.com"] [uri "/.git/config"] [unique_id "arF8Q4eRFSLmBWPqQkrcygAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-21 18:28:47
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.187.242 (242.187.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.187.242 (242.187.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:28:39.438367 2026] [security2:error] [pid 28807:tid 28807] [client 34.97.187.242:48456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.40svocaltrio.com.flashbackmusicmemories.com"] [uri "/.git/config"] [unique_id "arF3V3253irfzwADUYXekAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π·π΄
iulianh
2026-09-21 02:27:27
(19 hours ago)
80,443
Brute-Force
SSH
π©πͺ
dave
2026-09-21 02:04:51
(20 hours ago)
threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity ...
show more
threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity/appsec-vpatch,crowdsecurity/vpatch-CVE-2025-55182,crowdsecurity/vpatch-env-access,crowdsecurity/vpatch-git-config,custom/traefik-sensitive-path-probe observed_by=1_hosts hit_count=166 first_seen=2026-09-21T02:03:59Z last_seen=2026-09-21T02:04:51Z
show less
Web App Attack
π«π·
dynamix
2026-09-19 11:49:04
(2 days ago)
Multiple WAF Violations
Web App Attack
π³π±
Site.eu
2026-09-19 11:33:06
(2 days ago)
Excessive multi-domain requests
Brute-Force
π³π±
Site.eu
2026-09-18 02:25:40
(3 days ago)
Excessive multi-domain requests
Brute-Force
π¨π
zynex
2026-09-17 03:47:25
(4 days ago)
URL Probing: /app/.env
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-17 02:08:36
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.97.187.242 (242.187.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.187.242 (242.187.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:08:29.873042 2026] [security2:error] [pid 8649:tid 8649] [client 34.97.187.242:57472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wwts.io"] [uri "/.git/config"] [unique_id "aqtLnVpaQ4KFupH-aZz_NQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
oisecnet
2026-09-16 21:02:40
(5 days ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-09-16. 308 requests from this ...
show more
Automated report: Unauthorized vulnerability scanning detected on 2026-09-16. 308 requests from this IP.
show less
Port Scan
Hacking
Web App Attack
π³π±
ConsulHosting
2026-09-16 05:10:45
(5 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
π³π±
Alt255
2026-09-16 05:07:52
(5 days ago)
[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.97.187.242 - - [16/Sep/2026:07:07:36 +0200] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-16 05:06:28
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.97.187.242 (242.187.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.187.242 (242.187.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 01:06:21.328559 2026] [security2:error] [pid 1017:tid 1017] [client 34.97.187.242:47552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wvdietitian.method1.net"] [uri "/.git/config"] [unique_id "aqojzYbtjaGae_XV6NdlpgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack