🇩🇪
altenglaner
2026-10-16 07:32:57
(10 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇵🇱
bmino.pl
2026-10-16 07:32:33
(10 hours ago)
Autoban IP(2): 34.18.61.140 - Hostname: Google LLC - City: Doha - Country: Qatar - Organization: Goo ...
show more
Autoban IP(2): 34.18.61.140 - Hostname: Google LLC - City: Doha - Country: Qatar - Organization: Google Cloud (me-central1) - Reason: GET /.git/config HTTP/1.1
show less
Web App Attack
🇸🇪
vaia.cloud
2026-10-16 07:10:03
(10 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 06:50:04
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.18.61.140 (140.61.18.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.61.140 (140.61.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 02:49:59.919557 2026] [security2:error] [pid 2596:tid 2596] [client 34.18.61.140:45846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamroomrecording.com"] [uri "/.git/config"] [unique_id "atHJFyA9zP93MLK_Z5fVlQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-16 06:24:33
(11 hours ago)
20 attempts against mh-misbehave-ban on jammytest
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-16 06:14:34
(11 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
gigatech
2026-10-16 06:05:04
(11 hours ago)
Webserver Probing
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 05:55:09
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.18.61.140 (140.61.18.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.61.140 (140.61.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:55:01.797240 2026] [security2:error] [pid 6236:tid 6236] [client 34.18.61.140:59604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamisongreen.com"] [uri "/.git/config"] [unique_id "atG8NcBgXjKqKvVvNneaSAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
akasolutions.de
2026-10-16 05:34:51
(12 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.18.61.140 (QA/Qatar/140.61.18.34.bc. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.18.61.140 (QA/Qatar/140.61.18.34.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
SLSLLC
2026-10-16 05:25:24
(12 hours ago)
34.18.61.140 - - [16/Oct/2026:05:25:23 +0000] "GET /.env HTTP/2.0" 403 1927 "-" "Mozilla/5.0 (Window ...
show more
34.18.61.140 - - [16/Oct/2026:05:25:23 +0000] "GET /.env HTTP/2.0" 403 1927 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-10-16 04:18:09
(13 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 03:52:07
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.18.61.140 (140.61.18.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.61.140 (140.61.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:52:01.344273 2026] [security2:error] [pid 18188:tid 18188] [client 34.18.61.140:58500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamestaylorart.com.ingberinteriors.com"] [uri "/.git/config"] [unique_id "atGfYVXUVBIcsQOacgjM3wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 03:07:10
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.18.61.140 (140.61.18.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.61.140 (140.61.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:07:07.074754 2026] [security2:error] [pid 12672:tid 12672] [client 34.18.61.140:48298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamesmsmall.com"] [uri "/.git/config"] [unique_id "atGU20cnajyugpxbuu4K5gAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 01:35:39
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.18.61.140 (140.61.18.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.61.140 (140.61.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 21:35:33.104434 2026] [security2:error] [pid 31210:tid 31210] [client 34.18.61.140:49916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamesclarklaw.com"] [uri "/.git/config"] [unique_id "atF_ZZzYMjdXpU0XiyojoQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 01:02:57
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.18.61.140 (140.61.18.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.61.140 (140.61.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 21:02:50.710604 2026] [security2:error] [pid 11489:tid 11489] [client 34.18.61.140:33618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamesallenwalker.com"] [uri "/.git/config"] [unique_id "atF3uv2ONp_yR_i2VnVFJgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack