🇳🇱
Alt255
2026-10-26 21:20:32
(8 hours ago)
[ti-tinov] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 13 ...
show more
[ti-tinov] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 137.184.74.1 - - [25/Oct/2026:21:38:08 +0100] "GET /boeteformulier/.git/config HTTP/1.1" 500 6193 "-" "NetSurf/1.2 (NetBSD; amd64)"
137.184.74.1 - - [25/Oct/2026:21:38:08 +0100] "GET /aanmelding_fra2_en/.git/config HTTP/1.1" 500 6193 "-" "Mozilla/4.1 (compatible; MSIE 5.0; Symbian OS; Nokia 6600;452) Opera 6.20 [en-US]"
137.184.74.1 - - [25/Oct/2026:21:38:08 +0100] "GET /diensten/.git/config HTTP/1.1" 500 6193 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-10-26 13:08:01
(16 hours ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
2026-10-26 03:16:40
(1 day ago)
Probing for exposed sensitive files.
Hacking
🇺🇸
jormaster3k
2026-10-26 02:36:46
(1 day ago)
Attack against Apache (too many 404s)
Web App Attack
🇺🇸
Rip
2026-10-26 01:52:48
(1 day ago)
403 Errors: Access Forbidden
Brute-Force
🇺🇸
TPI-Abuse
2026-10-26 01:52:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 137.184.74.1 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 137.184.74.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 21:52:37.524109 2026] [security2:error] [pid 15903:tid 15903] [client 137.184.74.1:46716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.yakarinc.com"] [uri "/contact/.git/config"] [unique_id "at6yZeXygxNjfivl7_y-NgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-10-26 01:08:00
(1 day ago)
Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [ice02,mx02,wa01,wa02]
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
Philister11
2026-10-26 01:03:38
(1 day ago)
CrowdSec: crowdsecurity/http-sensitive-files (US/AS14061)
Web App Attack
Hacking
🇺🇸
almazick
2026-10-26 00:59:04
(1 day ago)
Fail2Ban jail window on srv1.windowrepair.us banned 137.184.74.1 after 1 attempts
Bad Web Bot
Web App Attack
2026-10-26 00:55:53
(1 day ago)
137.184.74.1 - - [26/Oct/2026:08:55:53 +0800] "GET /sc/.git/config HTTP/1.1" 404 196 "-" "Mozilla/5. ...
show more
137.184.74.1 - - [26/Oct/2026:08:55:53 +0800] "GET /sc/.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-10-26 00:51:25
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-25T22:52:30.000Z.
Web App Attack
🇺🇸
IndigoRidge
2026-10-26 00:33:42
(1 day ago)
137.184.74.1 - - [25/Oct/2026:20:33:40 -0400] "GET /public/.git/config HTTP/1.1" 404 61142 "-" "Mozi ...
show more
137.184.74.1 - - [25/Oct/2026:20:33:40 -0400] "GET /public/.git/config HTTP/1.1" 404 61142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36 OPR/60.0.3255.83"
137.184.74.1 - - [25/Oct/2026:20:33:40 -0400] "GET /uncategorized/.git/config HTTP/1.1" 404 61142 "-" "Mozilla/5.0 (Linux; U; Android 2.2; en-ca; GT-P1000M Build/FROYO) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1"
137.184.74.1 - - [25/Oct/2026:20:33:40 -0400] "GET /education/.git/config HTTP/1.1" 404 61142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36"
...
show less
Web App Attack
🇬🇧
Aetherweb Ark
2026-10-26 00:31:55
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 137.184.74.1 (US/United States/-): N in the las ...
show more
(mod_security) mod_security (id:949110) triggered by 137.184.74.1 (US/United States/-): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 00:23:43
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 137.184.74.1 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 137.184.74.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 20:23:39.968234 2026] [security2:error] [pid 7864:tid 7864] [client 137.184.74.1:40414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.whodatnation.com"] [uri "/2010/.git/config"] [unique_id "at6di-dw_ngjmn7KeBWHzwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-10-26 00:15:23
(1 day ago)
Repeated exploit attempts, for example: /wayfinding/.git/config /.git/config (HTTP/1.1 port 443, use ...
show more
Repeated exploit attempts, for example: /wayfinding/.git/config /.git/config (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Linux; Android 6.0.1; Lenovo P1a42) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36")
show less
Web App Attack