|
🇳🇱
Alt255
|
|
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.171.215.103 - - \[03/Nov/2026:06:33:08 +0100\] "GET /.git/config HTTP/1.1" 301 618 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.171.215.103 - - \[03/Nov/2026:06:33:08 +0100\] "GET /.git/config HTTP/1.1" 301 618 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
Alt255
|
|
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.171.215.103 - - [03/Nov/2026:06:10:31 +0100] "GET /.git/config HTTP/1.1" 404 361 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTM ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.171.215.103 - - [03/Nov/2026:06:10:31 +0100] "GET /.git/config HTTP/1.1" 404 361 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
Hazzard
|
|
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
|
SQL Injection
|
|
🇸🇪
vaia.cloud
|
|
crowdsecurity/http-admin-interface-probing
|
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.171.215.103 (103.215.171.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 17:40:13.403608 2026] [security2:error] [pid 5838:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.171.215.103 (103.215.171.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 17:40:13.403608 2026] [security2:error] [pid 5838:tid 5838] [client 34.171.215.103:45006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "instituteofscience.com"] [uri "/.git/config"] [unique_id "aukRTbxYFXfx3Y4OKzCAggAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.171.215.103 (103.215.171.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 17:24:47.905598 2026] [security2:error] [pid 13832:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.171.215.103 (103.215.171.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 17:24:47.905598 2026] [security2:error] [pid 13832:tid 13832] [client 34.171.215.103:44070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desarrollosdecolima.com"] [uri "/.git/config"] [unique_id "aukNrxOMm2Hji_1vpf2s4AAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Multiple web server 400 error codes from same source ip
|
Web App Attack
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
🇩🇪
netclix.gr
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.171.215.103 (US/United States/103.215.171.34.bc.googleusercontent.com): (CF_ENABLE)
|
SQL Injection
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
🇺🇸
mnsf
|
|
Scanning/Probing (11)
|
Brute-Force
Web App Attack
|
|
🇳🇱
Savvii
|
|
20 attempts against mh-misbehave-ban on redirect
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇹
madaello
|
|
34.171.215.103 - - [02/Nov/2026:09:50:47 +0100] "GET / HTTP/1.1" 301 4771 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.171.215.103 - - [02/Nov/2026:09:50:47 +0100] "POST / HTTP/1.1" 30 ...
show more
34.171.215.103 - - [02/Nov/2026:09:50:47 +0100] "GET / HTTP/1.1" 301 4771 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.171.215.103 - - [02/Nov/2026:09:50:47 +0100] "POST / HTTP/1.1" 301 673 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.171.215.103 - - [02/Nov/2026:09:50:47 +0100] "POST / HTTP/1.1" 301 673 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.171.215.103 - - [02/Nov/2026:09:50:47 +0100] "POST / HTTP/1.1" 301 673 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Hacking
|
|
Anonymous
|
|
| Common web attack.
|
Hacking
SQL Injection
Web App Attack
|