🇳🇱
Alt255
2026-11-13 16:43:57
UTC ·
(5 hours ago)
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.15.165.79 - - [13/Nov/2026:17:43:36 +0100] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ...
show more
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.15.165.79 - - [13/Nov/2026:17:43:36 +0100] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇵🇱
lns.bz
2026-11-13 09:15:42
UTC ·
(13 hours ago)
Web app attack [PL.Lu]
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:14:23
UTC ·
(13 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.15.165.79 (79.165.15.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:14:15.104965 2026] [security2:error] [pid 12063:tid 12 ...
show more
(mod_security) mod_security (id:949110) triggered by 34.15.165.79 (79.165.15.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:14:15.104965 2026] [security2:error] [pid 12063:tid 12063] [client 34.15.165.79:33916] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "akistech.com"] [uri "/.git/config"] [unique_id "avbU54unF8MIPLU8-VrYywAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-11-13 08:02:20
UTC ·
(14 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.15.165.79 (TH/Thailand/79.165.15.34.bc.googleusercontent.com)
SQL Injection
🇩🇪
FeG Deutschland
2026-11-13 07:22:24
UTC ·
(15 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇬🇧
consul.to
2026-11-13 05:17:38
UTC ·
(17 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇸🇪
vaia.cloud
2026-11-13 05:05:02
UTC ·
(17 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
2026-11-13 05:02:21
UTC ·
(17 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TH, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-11-13 01:00:10
UTC ·
(21 hours ago)
[FriNov1302:00:05.8005322026][security2:error][pid2118891:tid2118911][client34.15.165.79:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\ ...
show more
[FriNov1302:00:05.8005322026][security2:error][pid2118891:tid2118911][client34.15.165.79:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"akastudio.ch\"][uri\"/\"][unique_id\"avZhFUa10CriNwTpqhs_DAAAAAU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇩🇪
AetherFox
2026-11-13 00:18:16
UTC ·
(22 hours ago)
AetherFox VoidGuard detected: [Fri Nov 13 00:18:15.203739 2026] [authz_core:error] [pid 49526:tid 49581] [client 34.15.165.79:39340] AH01630: client denied by server configuration: proxy:https://91.200.103.154/
[Fri Nov 13 00:18:15.203859 2026] [auth ...
show more
AetherFox VoidGuard detected: [Fri Nov 13 00:18:15.203739 2026] [authz_core:error] [pid 49526:tid 49581] [client 34.15.165.79:39340] AH01630: client denied by server configuration: proxy:https://91.200.103.154/
[Fri Nov 13 00:18:15.203859 2026] [authz_core:error] [pid 49526:tid 49581] [client 34.15.165.79:39340] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Fri Nov 13 00:18:15.396361 2026] [authz_core:error] [pid 49526:tid 49582] [client 34.15.165.79:39340] AH01630: client denied by server configuration: proxy:https://91.200.103.154/
[Fri Nov 13 00:18:15.396501 2026] [authz_core:error] [pid 49526:tid 49582] [client 34.15.165.79:39340] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Fri Nov 13 00:18:15.589322 2026] [authz_core:error] [pid 49526:tid 49583] [client 34.15.165.79:39340] AH01630: client denied by server configuration: proxy:https://91.200.103.154/
...
show less
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-11-12 21:55:57
UTC ·
(1 day ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 1s
Web App Attack
🇨🇿
akac
2026-11-12 21:31:10
UTC ·
(1 day ago)
Web vulnerability scanning: HTTP/1.1 GET /.git/config
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-11-12 20:54:15
UTC ·
(1 day ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-11-12 20:39:52
UTC ·
(1 day ago)
URL Probing: /server/.env
Web App Attack
2026-11-12 20:08:36
UTC ·
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
