🇳🇱
Alt255
2026-10-26 21:13:42
(2 days ago)
[ti-14al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34.134.126.4 - - [23/Oct/2026:02:55:13 +0200] "GET /.git/config HTTP/1.1" 301 5622 "-" "Mozilla/5.0 (Linux; Android 16; SM-S961B) AppleWebKit/537.36 (KHT ...
show more
[ti-14al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34.134.126.4 - - [23/Oct/2026:02:55:13 +0200] "GET /.git/config HTTP/1.1" 301 5622 "-" "Mozilla/5.0 (Linux; Android 16; SM-S961B) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/28.0 Chrome/138.0.0.0 Mobile Safari/537.36"
34.134.126.4 - - [23/Oct/2026:02:55:13 +0200] "GET /.git/config HTTP/1.1" 301 5622 "-" "Mozilla/5.0 (Linux; Android 16; Pixel 10 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-25 13:41:35
(4 days ago)
[ti-14al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34.134.126.4 - - [23/Oct/2026:02:55:13 +0200] "GET /.git/config HTTP/1.1" 301 5622 "-" "Mozilla/5.0 (Linux; Android 16; SM-S961B) AppleWebKit/537.36 (KHT ...
show more
[ti-14al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34.134.126.4 - - [23/Oct/2026:02:55:13 +0200] "GET /.git/config HTTP/1.1" 301 5622 "-" "Mozilla/5.0 (Linux; Android 16; SM-S961B) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/28.0 Chrome/138.0.0.0 Mobile Safari/537.36"
34.134.126.4 - - [23/Oct/2026:02:55:13 +0200] "GET /.git/config HTTP/1.1" 301 5622 "-" "Mozilla/5.0 (Linux; Android 16; Pixel 10 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
service Informatique
2026-10-24 04:00:37
(5 days ago)
/.git
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-23 22:00:58
(5 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-22.
Web App Attack
SSH
Hacking
🇺🇸
craudiovizai
2026-10-23 06:30:44
(6 days ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /.git/config. Blocked at the edge.
Web App Attack
Bad Web Bot
🇨🇿
akac
2026-10-23 05:03:20
(6 days ago)
Web vulnerability scanning: HTTP/1.1 GET /.git/config
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
service Informatique
2026-10-23 04:00:37
(6 days ago)
/.git
Web App Attack
🇩🇰
toolbit.online
2026-10-23 02:00:02
(6 days ago)
Automated scan for common CMS/admin/secrets-exposure paths (WordPress/Joomla/phpMyAdmin/.env/.git/cgi-bin and similar) that do not exist on this server - all requests 404'd, volume stayed below any automatic ban threshold.
Bad Web Bot
Web App Attack
🇫🇮
paissangroup
2026-10-23 01:56:22
(6 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 01:45:54
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.134.126.4 (4.126.134.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 21:45:48.803567 2026] [security2:error] [pid 19475:tid 19 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.134.126.4 (4.126.134.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 21:45:48.803567 2026] [security2:error] [pid 19475:tid 19475] [client 34.134.126.4:23178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "architech.com"] [uri "/.git/config"] [unique_id "atq8TGHBUZY4lMLp-U5lnAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-10-23 01:44:37
(6 days ago)
Blocked by ConnMonitor
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-10-23 01:24:06
(6 days ago)
34.134.126.4 - - [22/Oct/2026:19:24:05 -0600] "GET /.git/config HTTP/1.1" 300 11141 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1"
...
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 01:16:24
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.134.126.4 (4.126.134.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 21:16:19.470434 2026] [security2:error] [pid 30410:tid 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.134.126.4 (4.126.134.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 21:16:19.470434 2026] [security2:error] [pid 30410:tid 30410] [client 34.134.126.4:40236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "christianscience.org.keyston.net"] [uri "/.git/config"] [unique_id "atq1Y45fBiou5doUMaC6wQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
kie
2026-10-23 01:14:55
(6 days ago)
23-10-2026:01:14:51UTC [Nginx Web Server] Suspicious web request: path:/.git (1 request(s)).
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-23 00:55:36
(6 days ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.134.126.4 - - \[23/Oct/2026:02:55:13 +0200\] "GET /.git/config HTTP/1.1" 301 5622 "-" "Mozilla/5.0 \(Linux\; Android 16\; SM-S961B\) AppleWebKit/537.3 ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.134.126.4 - - \[23/Oct/2026:02:55:13 +0200\] "GET /.git/config HTTP/1.1" 301 5622 "-" "Mozilla/5.0 \(Linux\; Android 16\; SM-S961B\) AppleWebKit/537.36 \(KHTML, like Gecko\) SamsungBrowser/28.0 Chrome/138.0.0.0 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
