🇬🇧
thetomtaylor.co.uk
2026-11-09 02:07:02
UTC ·
(6 days ago)
Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [mx01,mx02,wa01,wa02]
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-10-06 13:07:02
UTC ·
(1 month ago)
Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [mx02,wa01,wa02]
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
🇮🇳
evicky2002
2026-08-31 00:01:03
UTC ·
(2 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-08-29 10:22:57
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.135.89.208 (208.89.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 06:22:50.262119 2026] [security2:error] [pid 9318:tid 9 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.135.89.208 (208.89.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 06:22:50.262119 2026] [security2:error] [pid 9318:tid 9318] [client 34.135.89.208:40534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bickleton.org"] [uri "/app/.git/config"] [unique_id "apKy-kv12k8nGJJrm02KvgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-29 09:10:01
UTC ·
(2 months ago)
suspicious request in access.log
Web App Attack
🇬🇧
consul.to
2026-08-29 08:22:30
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇦🇹
Pingger Shikkoken
2026-08-29 07:04:05
UTC ·
(2 months ago)
2026-08-29T07:04:05+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=34.135.89.208 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=14345 DF PROTO=TCP SPT=59114 DPT=443 WIN ...
show more
2026-08-29T07:04:05+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=34.135.89.208 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=14345 DF PROTO=TCP SPT=59114 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-29T07:04:05+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=34.135.89.208 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=41153 DF PROTO=TCP SPT=59142 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-29T07:04:05+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=34.135.89.208 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=54 ID=11100 DF PROTO=TCP SPT=59126 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 ...
show less
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-29 02:32:25
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.135.89.208 (208.89.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 22:32:16.920741 2026] [security2:error] [pid 4548:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.135.89.208 (208.89.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 22:32:16.920741 2026] [security2:error] [pid 4548:tid 4548] [client 34.135.89.208:54702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goshop.gatheringsattheschool.com"] [uri "/var/www/.git/config"] [unique_id "apJEsEh2LQ_XumGRoRnMBAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 01:19:17
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.135.89.208 (208.89.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 21:19:14.364300 2026] [security2:error] [pid 29804:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.135.89.208 (208.89.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 21:19:14.364300 2026] [security2:error] [pid 29804:tid 29823] [client 34.135.89.208:47914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cargosanibel.newleafpro.com"] [uri "/.git/config"] [unique_id "apIzkmUNw_Pa5vbYVDvgMAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 00:39:23
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.135.89.208 (208.89.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:39:18.264788 2026] [security2:error] [pid 3151:tid 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.135.89.208 (208.89.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:39:18.264788 2026] [security2:error] [pid 3151:tid 3151] [client 34.135.89.208:60302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thebradleyclinic.com.jbcllcnet.com"] [uri "/backend/.git/config"] [unique_id "apIqNlyg0InIaOcCTMbHkAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 23:11:34
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.135.89.208 (208.89.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 19:11:29.563699 2026] [security2:error] [pid 21248:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.135.89.208 (208.89.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 19:11:29.563699 2026] [security2:error] [pid 21248:tid 21248] [client 34.135.89.208:51276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brianaugervideo.com"] [uri "/src/.git/config"] [unique_id "apIVoQhfqGjbgcA9_SKnugAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
nate naten
2026-08-28 22:23:21
UTC ·
(2 months ago)
HoneyTrap: git_config attempt on /.git/config from United States
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-08-28 22:19:16
UTC ·
(2 months ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇳🇱
e.fierstra
2026-08-28 22:06:53
UTC ·
(2 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-28 22:00:32
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27.
Web App Attack
SSH
Hacking