🇳🇱
Alt255
2026-11-04 01:06:05
UTC ·
(3 days ago)
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.116.103.118 - - [04/Nov/2026:02:05:44 +0100] "GET /.git/config HTTP/1.1" 301 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTM ...
show more
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.116.103.118 - - [04/Nov/2026:02:05:44 +0100] "GET /.git/config HTTP/1.1" 301 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-03 23:03:34
UTC ·
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-02.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-03 18:49:04
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.116.103.118 (118.103.116.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:48:56.881317 2026] [security2:error] [pid 16367:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.116.103.118 (118.103.116.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:48:56.881317 2026] [security2:error] [pid 16367:tid 16367] [client 34.116.103.118:58750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "va-designers.com"] [uri "/.git/config"] [unique_id "auosmFa85usBORcUR6LUawAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-03 06:39:34
UTC ·
(3 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
iwle
2026-11-02 21:09:51
UTC ·
(4 days ago)
[Mon Nov 02 16:09:49.308430 2026] [:error] [pid 217536:tid 217586] [client 34.116.103.118:0] [client 34.116.103.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\ ...
show more
[Mon Nov 02 16:09:49.308430 2026] [:error] [pid 217536:tid 217586] [client 34.116.103.118:0] [client 34.116.103.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "uvscards.com"] [uri "/.env"] [unique_id "auj8HY8ny7vxiHubGh_EKQAAARY"]
[Mon Nov 02 16:09:50.076020 2026] [:error] [pid 217536:tid 217566] [client 34.116.103.118:0] [client 34.116.103.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-02 17:17:32
UTC ·
(4 days ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 16:41:33
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.116.103.118 (118.103.116.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 11:41:29.010786 2026] [security2:error] [pid 22117:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.116.103.118 (118.103.116.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 11:41:29.010786 2026] [security2:error] [pid 22117:tid 22117] [client 34.116.103.118:50134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "univey.com"] [uri "/.git/config"] [unique_id "aui9OVeM0QO2CezXTPZvWQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-02 16:17:53
UTC ·
(4 days ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇮🇹
VHosting
2026-11-02 12:20:05
UTC ·
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-11-02 09:30:25
UTC ·
(4 days ago)
| [Dangerous/Australia] Aggressive IP 34.116.103.118 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
2026-11-02 09:26:17
UTC ·
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-11-02 08:31:15
UTC ·
(4 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
