🇯🇵
ki3
2026-11-14 04:45:29
UTC ·
(48 minutes ago)
Fail2Ban: Web App Attacks and Forum Spam 34.185.64.217 1794631528.0(JST)
Web Spam
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-14 00:23:39
UTC ·
(5 hours ago)
2.282 requests with url.path *.env
371 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
🇩🇪
Vegascosmetics
2026-11-13 21:05:47
UTC ·
(8 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): Abuse 100 / BAN. IP is on the AbuseIPDB blacklist and was blocked on the first request.
Hacking
Exploited Host
Web App Attack
🇳🇱
Savvii
2026-11-13 18:29:03
UTC ·
(11 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-13 17:57:01
UTC ·
(11 hours ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.185.64.217 - - [13/Nov/2026:18:56:41 +0100] "GET /.git/config HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.185.64.217 - - [13/Nov/2026:18:56:41 +0100] "GET /.git/config HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-13 17:43:27
UTC ·
(11 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇧🇷
ICS Labs
2026-11-13 16:48:40
UTC ·
(12 hours ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-13 UTC.
Brute-Force
🇸🇪
vaia.cloud
2026-11-13 15:40:02
UTC ·
(13 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 15:39:16
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.185.64.217 (217.64.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:39:08.031102 2026] [security2:error] [pid 26883:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.64.217 (217.64.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:39:08.031102 2026] [security2:error] [pid 26883:tid 26883] [client 34.185.64.217:34268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guller.net"] [uri "/.git/config"] [unique_id "avcvHMsXL6e-0CnNBXRgQwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 15:03:15
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.185.64.217 (217.64.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:03:07.515761 2026] [security2:error] [pid 4726:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.64.217 (217.64.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:03:07.515761 2026] [security2:error] [pid 4726:tid 4726] [client 34.185.64.217:59836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gulftelecom.com"] [uri "/.git/config"] [unique_id "avcmqzdyl5bpzu8vY3tCOwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 12:50:28
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.185.64.217 (217.64.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:50:23.296404 2026] [security2:error] [pid 12131:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.64.217 (217.64.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:50:23.296404 2026] [security2:error] [pid 12131:tid 12131] [client 34.185.64.217:53090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guldunyayayinlari.com"] [uri "/.git/config"] [unique_id "avcHj9BK6L8DA3uMYud29wAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-11-13 12:25:05
UTC ·
(17 hours ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:18:00
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.185.64.217 (217.64.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:17:56.238151 2026] [security2:error] [pid 14381:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.64.217 (217.64.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:17:56.238151 2026] [security2:error] [pid 14381:tid 14381] [client 34.185.64.217:39422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guitarwisdom.com"] [uri "/.git/config"] [unique_id "avbj1DewbyaGMGYixxsKnQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:47:14
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.185.64.217 (217.64.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:47:09.901818 2026] [security2:error] [pid 23460:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.64.217 (217.64.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:47:09.901818 2026] [security2:error] [pid 23460:tid 23478] [client 34.185.64.217:49078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guitarmans.com"] [uri "/.git/config"] [unique_id "avbcnUeoPIvPgyPBVwlhFgAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:01:13
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.185.64.217 (217.64.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:01:06.102637 2026] [security2:error] [pid 14898:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.64.217 (217.64.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:01:06.102637 2026] [security2:error] [pid 14898:tid 14898] [client 34.185.64.217:51540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guitar-pedals-amp.com"] [uri "/.git/config"] [unique_id "avbR0rBzPAC1nt8HEmVyvwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
