🇩🇪
klaus_ph
2026-09-26 23:27:32
(1 month ago)
2026-09-25 22:15:36,467 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.132.250.39
.. ...
show more
2026-09-25 22:15:36,467 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.132.250.39
...
show less
Bad Web Bot
🇩🇪
klaus_ph
2026-09-23 12:49:33
(1 month ago)
2026-09-23 00:22:26,355 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.132.250.39
.. ...
show more
2026-09-23 00:22:26,355 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.132.250.39
...
show less
Bad Web Bot
🇳🇱
homeshowdomain.nl
2026-09-22 22:06:45
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-21.
show less
Web App Attack
SSH
Hacking
🇺🇸
craudiovizai
2026-09-22 12:30:53
(1 month ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /.git/config. Blocked a ...
show more
Automated honeypot detection. honeypot against a Next.js application. Paths: /.git/config. Blocked at the edge.
show less
Web App Attack
Bad Web Bot
🇿🇦
conure.sh
2026-09-22 12:05:01
(1 month ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 2 domain(s) in -1s
Web App Attack
🇮🇳
evicky2002
2026-09-22 06:00:01
(1 month ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇳🇱
Cloud86 B.V.
2026-09-21 23:00:07
(1 month ago)
categories: Email Spam
Email Spam
🇺🇸
TPI-Abuse
2026-09-21 18:31:45
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.132.250.39 (39.250.132.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.132.250.39 (39.250.132.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:31:37.744631 2026] [security2:error] [pid 8185:tid 8185] [client 34.132.250.39:55948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.tonynvn.me"] [uri "/.git/config"] [unique_id "arF4CYWlT0zm5EjW2kUGsQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 18:10:06
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.132.250.39 (39.250.132.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.132.250.39 (39.250.132.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:10:00.720153 2026] [security2:error] [pid 9648:tid 9648] [client 34.132.250.39:36396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.merlinaerospace.com"] [uri "/.git/config"] [unique_id "arFy-P_NCR7NBaZq9ZrUaQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
mcabanas
2026-09-21 18:00:15
(1 month ago)
[ARKAND Sentinel Security Engine] Hostile activity detected & blocked at Linux kernel (iptables). Ta ...
show more
[ARKAND Sentinel Security Engine] Hostile activity detected & blocked at Linux kernel (iptables). Target: arkand.mx. Reason: Escáner hostil: intento de acceso a '/.git/config'. TLS JA3: 93c7d42c0df602fb91589311534831f5.
show less
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 17:46:10
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.132.250.39 (39.250.132.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.132.250.39 (39.250.132.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 13:46:02.015809 2026] [security2:error] [pid 13378:tid 13378] [client 34.132.250.39:47960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.darkcodedesign.net"] [uri "/.git/config"] [unique_id "arFtWuXDWtjsUnZtceTStgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-21 17:21:23
(1 month ago)
Web scanner: GET /.git/config
Web App Attack
Hacking
🇺🇸
mnsf
2026-09-21 17:05:33
(1 month ago)
Abuse Detected (15)
Brute-Force
Web App Attack
🇺🇸
infra-monitor
2026-09-21 17:00:08
(1 month ago)
Automated ban via infra-monitor: suspicious-probe, mgmt-path-probe
Port Scan
Web App Attack
🇩🇪
Blexyel
2026-09-21 16:57:10
(1 month ago)
34.132.250.39 - - [21/Sep/2026:18:57:09 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "-"
...
Brute-Force
Web App Attack