๐ง๐ท
radardatelecom
2026-11-06 16:54:04
UTC ยท
(4 hours ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-11-06 15:49:36
UTC ยท
(5 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
surabi_enhai
2026-11-06 13:51:07
UTC ยท
(7 hours ago)
Web vulnerability scanning: 3 requests for sensitive files/exploit paths (.env, .git, wp-login, xmlrpc, phpunit, path traversal) within 1h. Source blocked by fail2ban.
Web App Attack
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-11-06 11:22:05
UTC ยท
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.179.217.202 (202.217.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:21:58.622263 2026] [security2:error] [pid 19822:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.217.202 (202.217.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:21:58.622263 2026] [security2:error] [pid 19822:tid 19822] [client 34.179.217.202:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.assistguide.net"] [uri "/.env.local"] [unique_id "au24VhbBZwjm_n6MFT8gVgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 04:46:18
UTC ยท
(16 hours ago)
Bad Web Bot
๐ฌ๐ง
jackalek
2026-11-05 19:01:49
UTC ยท
(1 day ago)
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.git/config HTTP/1.1" 404 549 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.env ...
show more
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.git/config HTTP/1.1" 404 549 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.env HTTP/1.1" 404 549 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.env.local HTTP/1.1" 404 549 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.env.production HTTP/1.1" 404 549 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.env.staging HTTP/1.1" 404 549 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:19:01:49 +0
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
FD-IX
2026-11-05 18:24:57
UTC ยท
(1 day ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ฆ๐บ
Klaverstyn
2026-11-05 18:19:16
UTC ยท
(1 day ago)
Cross-vhost secrets/RCE probing campaign
Web App Attack
Hacking
๐บ๐ธ
PlexLads
2026-11-05 09:04:08
UTC ยท
(1 day ago)
147.182.234.53:443 34.179.217.202 - - [05/Nov/2026:01:04:07 -0800] "GET / HTTP/1.1" 403 1928 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 147.182.234.53:443 34.179.217.202 - - [ ...
show more
147.182.234.53:443 34.179.217.202 - - [05/Nov/2026:01:04:07 -0800] "GET / HTTP/1.1" 403 1928 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 147.182.234.53:443 34.179.217.202 - - [05/Nov/2026:01:04:07 -0800] "POST / HTTP/1.1" 403 421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
๐ฉ๐ช
altenglaner
2026-11-05 08:50:59
UTC ยท
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
๐ณ๐ฑ
middelkoopcc
2026-11-05 08:42:01
UTC ยท
(1 day ago)
2026-11-05 09:40:43 GET /.git/config [301] && 2026-11-05 09:40:43 GET /.env [301] && 2026-11-05 09:40:44 GET /.env.bak [301] && 404 more within 20 minutes
Web App Attack
๐บ๐ธ
Blamdom
2026-11-05 08:35:30
UTC ยท
(1 day ago)
Secret/config-file recon: requested /.git/config. 109 HTTP request(s), 2026-11-05 08:35:30 to 08:35:53 UTC (23s).
Requests (method path -> status xcount):
POST / -> 200 x4
GET /.[redacted] -> 404 x2
GET / -> 200
GET /.git/config -> 403
GET ...
show more
Secret/config-file recon: requested /.git/config. 109 HTTP request(s), 2026-11-05 08:35:30 to 08:35:53 UTC (23s).
Requests (method path -> status xcount):
POST / -> 200 x4
GET /.[redacted] -> 404 x2
GET / -> 200
GET /.git/config -> 403
GET /.env -> 403
GET /.env.local -> 404
GET /.env.production -> 404
GET /.env.staging -> 404
...+97 more distinct requests
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-11-05 07:47:40
UTC ยท
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.179.217.202 (202.217.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 02:47:38.879560 2026] [security2:error] [pid 16993:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.217.202 (202.217.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 02:47:38.879560 2026] [security2:error] [pid 16993:tid 16993] [client 34.179.217.202:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.plaiatech.com"] [uri "/.git/config"] [unique_id "auw0mln5yYmwL_q0ycaO4QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Blexyel
2026-11-05 06:01:15
UTC ยท
(1 day ago)
34.179.217.202 - - [05/Nov/2026:07:01:13 +0100] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Brute-Force
Web App Attack
๐ฉ๐ช
pigro
2026-11-05 05:27:58
UTC ยท
(1 day ago)
34.179.217.202 - - [05/Nov/2026:06:27:56 +0100] "GET /api/.env HTTP/1.1" 301 5 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:06:27:57 +0100] "GET /api/v1/.e ...
show more
34.179.217.202 - - [05/Nov/2026:06:27:56 +0100] "GET /api/.env HTTP/1.1" 301 5 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:06:27:57 +0100] "GET /api/v1/.env HTTP/1.1" 301 5 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack