Anonymous
2026-11-06 04:46:18
UTC ·
(5 hours ago)
Bad Web Bot
🇬🇧
jackalek
2026-11-05 19:01:49
UTC ·
(15 hours ago)
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.git/config HTTP/1.1" 404 549 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.env ...
show more
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.git/config HTTP/1.1" 404 549 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.env HTTP/1.1" 404 549 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.env.local HTTP/1.1" 404 549 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.env.production HTTP/1.1" 404 549 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:19:01:48 +0000] "GET /.env.staging HTTP/1.1" 404 549 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:19:01:49 +0
...
show less
Brute-Force
Web App Attack
🇩🇪
FD-IX
2026-11-05 18:24:57
UTC ·
(15 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇦🇺
Klaverstyn
2026-11-05 18:19:16
UTC ·
(15 hours ago)
Cross-vhost secrets/RCE probing campaign
Web App Attack
Hacking
🇺🇸
PlexLads
2026-11-05 09:04:08
UTC ·
(1 day ago)
147.182.234.53:443 34.179.217.202 - - [05/Nov/2026:01:04:07 -0800] "GET / HTTP/1.1" 403 1928 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 147.182.234.53:443 34.179.217.202 - - [ ...
show more
147.182.234.53:443 34.179.217.202 - - [05/Nov/2026:01:04:07 -0800] "GET / HTTP/1.1" 403 1928 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 147.182.234.53:443 34.179.217.202 - - [05/Nov/2026:01:04:07 -0800] "POST / HTTP/1.1" 403 421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
🇩🇪
altenglaner
2026-11-05 08:50:59
UTC ·
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇳🇱
middelkoopcc
2026-11-05 08:42:01
UTC ·
(1 day ago)
2026-11-05 09:40:43 GET /.git/config [301] && 2026-11-05 09:40:43 GET /.env [301] && 2026-11-05 09:40:44 GET /.env.bak [301] && 404 more within 20 minutes
Web App Attack
🇺🇸
Blamdom
2026-11-05 08:35:30
UTC ·
(1 day ago)
Secret/config-file recon: requested /.git/config. 109 HTTP request(s), 2026-11-05 08:35:30 to 08:35:53 UTC (23s).
Requests (method path -> status xcount):
POST / -> 200 x4
GET /.[redacted] -> 404 x2
GET / -> 200
GET /.git/config -> 403
GET ...
show more
Secret/config-file recon: requested /.git/config. 109 HTTP request(s), 2026-11-05 08:35:30 to 08:35:53 UTC (23s).
Requests (method path -> status xcount):
POST / -> 200 x4
GET /.[redacted] -> 404 x2
GET / -> 200
GET /.git/config -> 403
GET /.env -> 403
GET /.env.local -> 404
GET /.env.production -> 404
GET /.env.staging -> 404
...+97 more distinct requests
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 07:47:40
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.179.217.202 (202.217.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 02:47:38.879560 2026] [security2:error] [pid 16993:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.217.202 (202.217.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 02:47:38.879560 2026] [security2:error] [pid 16993:tid 16993] [client 34.179.217.202:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.plaiatech.com"] [uri "/.git/config"] [unique_id "auw0mln5yYmwL_q0ycaO4QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-11-05 06:01:15
UTC ·
(1 day ago)
34.179.217.202 - - [05/Nov/2026:07:01:13 +0100] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Brute-Force
Web App Attack
🇩🇪
pigro
2026-11-05 05:27:58
UTC ·
(1 day ago)
34.179.217.202 - - [05/Nov/2026:06:27:56 +0100] "GET /api/.env HTTP/1.1" 301 5 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:06:27:57 +0100] "GET /api/v1/.e ...
show more
34.179.217.202 - - [05/Nov/2026:06:27:56 +0100] "GET /api/.env HTTP/1.1" 301 5 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.217.202 - - [05/Nov/2026:06:27:57 +0100] "GET /api/v1/.env HTTP/1.1" 301 5 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-11-05 04:46:13
UTC ·
(1 day ago)
Bad Web Bot
🇩🇪
svr
2026-11-05 04:08:01
UTC ·
(1 day ago)
Abusive Automated Web Scanner
Web App Attack
Anonymous
2026-11-05 02:23:54
UTC ·
(1 day ago)
sensitive path probe detected by fail2ban
...
Port Scan
Web App Attack
🇫🇷
Catalin Negru
2026-11-05 01:49:15
UTC ·
(1 day ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force