๐ฆ๐น
Erpelstolz
2026-10-16 13:58:33
(6 hours ago)
fail2ban on bvseq; jail=cobi-post
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-16 13:57:27
(6 hours ago)
[ti-spijkov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. E ...
show more
[ti-spijkov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.16.157.97 - - [16/Oct/2026:15:57:26 +0200] "GET /.git/config HTTP/1.1" 301 620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
Lee Daniel
2026-10-16 13:47:04
(6 hours ago)
34.16.157.97 - - [16/Oct/2026:09:47:04 -0400] "GET /.env HTTP/1.1" 403 6314 "-" "Mozilla/5.0 (X11; L ...
show more
34.16.157.97 - - [16/Oct/2026:09:47:04 -0400] "GET /.env HTTP/1.1" 403 6314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-16 13:34:34
(7 hours ago)
4.529 requests with url.path *phpinfo.php
769 requests with url.path *credentials.json
397 reques ...
show more
4.529 requests with url.path *phpinfo.php
769 requests with url.path *credentials.json
397 requests with url.path *.php.bak
206 requests with url.path /phpinfo.php
show less
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-16 13:24:25
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.16.157.97 (97.157.16.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.157.97 (97.157.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:24:21.944067 2026] [security2:error] [pid 28553:tid 28553] [client 34.16.157.97:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bvnboysbasketball.com"] [uri "/.git/config"] [unique_id "atIlhXISZDFs4jKiBqkUbgAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 12:46:18
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.16.157.97 (97.157.16.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.157.97 (97.157.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:46:10.762965 2026] [security2:error] [pid 17500:tid 17500] [client 34.16.157.97:49284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bvisecurity.com"] [uri "/.git/config"] [unique_id "atIckvvXgDMdp9afEfYsNQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 12:22:15
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.16.157.97 (97.157.16.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.157.97 (97.157.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:22:10.934942 2026] [security2:error] [pid 32202:tid 32202] [client 34.16.157.97:56990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bvi-boat-registration.com"] [uri "/.git/config"] [unique_id "atIW8kFU11jWiNRDBr-6VAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Marten Mark
2026-10-16 11:47:58
(8 hours ago)
34.16.157.97 - - [16/Oct/2026:11:47:57 +0000] "GET /sitemaps/.env HTTP/2.0" 500 576 "-" "Mozilla/5.0 ...
show more
34.16.157.97 - - [16/Oct/2026:11:47:57 +0000] "GET /sitemaps/.env HTTP/2.0" 500 576 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-10-16 11:21:33
(9 hours ago)
Excessive 404/403 errors
Brute-Force
๐ณ๐ฑ
GabrielJST
2026-10-16 10:52:52
(9 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.16.157.97 (US/United States/97.157.1 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.16.157.97 (US/United States/97.157.16.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
๐บ๐ธ
TheCluePhone
2026-10-16 10:36:22
(10 hours ago)
Automated vulnerability scanner: 210 exploit-path requests since 2026-10-16 probing env, git, profil ...
show more
Automated vulnerability scanner: 210 exploit-path requests since 2026-10-16 probing env, git, profiler, server-status, wordpress. Blocked/404'd at CDN edge.
show less
Web App Attack
Bad Web Bot
๐ซ๐ท
dynamix
2026-10-16 10:05:27
(10 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
Rip
2026-10-16 09:58:24
(10 hours ago)
Remote Command Execution - Unix Shell Expression Found in URI
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 08:06:34
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.16.157.97 (97.157.16.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.157.97 (97.157.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 04:06:29.701610 2026] [security2:error] [pid 562:tid 601] [client 34.16.157.97:45860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buyused-jomega.jomega.org"] [uri "/.git/config"] [unique_id "atHbBepVeSd0fT7Qp186hgAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 05:38:41
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.16.157.97 (97.157.16.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.157.97 (97.157.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:38:38.624242 2026] [security2:error] [pid 3595:tid 3595] [client 34.16.157.97:52160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buynorthwest.com"] [uri "/.git/config"] [unique_id "atG4XseYQL_3n3n3d4hT6AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack