🇳🇱
Site.eu
2026-10-17 10:27:21
(5 hours ago)
Excessive multi-domain requests
Brute-Force
2026-10-16 13:35:00
(1 day ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 07:06:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.22.63.91 (91.63.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.63.91 (91.63.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 03:06:07.321474 2026] [security2:error] [pid 7441:tid 7441] [client 34.22.63.91:50366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jamelrobinson.com"] [uri "/.git/config"] [unique_id "atHM375m491nRpzi1yCtgAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-16 06:58:26
(1 day ago)
Web application attack detected.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 06:26:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.22.63.91 (91.63.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.63.91 (91.63.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 02:26:35.577059 2026] [security2:error] [pid 19190:tid 19190] [client 34.22.63.91:45558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jadeiteholdings.com"] [uri "/.git/config"] [unique_id "atHDm6OkhalY59nmDjs-aAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-10-16 06:12:51
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇦🇺
rubixstudios
2026-10-16 05:57:02
(1 day ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
iwle
2026-10-16 05:07:12
(1 day ago)
[Fri Oct 16 01:07:11.205092 2026] [:error] [pid 1581:tid 1666] [client 34.22.63.91:51202] [client 34 ...
show more
[Fri Oct 16 01:07:11.205092 2026] [:error] [pid 1581:tid 1666] [client 34.22.63.91:51202] [client 34.22.63.91] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mail.iwle.com"] [uri "/.git/config"] [unique_id "atGw__O3HKHt0QppgqjCngAAAAw"]
[Fri Oct 16 01:07:11.414246 2026] [:error] [pid 1581:tid 1683] [client 34.22.63.91:51202] [client 34.22.63.91] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line
...
show less
Web App Attack
Brute-Force
🇳🇱
Alt255
2026-10-16 04:47:39
(1 day ago)
[ti-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.22.63.91 - - [16/Oct/2026:06:47:29 +0200] "GET /.git/config HTTP/1.1" 404 1370 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-10-16 04:14:10
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇺🇸
oralunal
2026-10-16 04:12:27
(1 day ago)
IP banned by Fail2Ban in jail its-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 03:53:35
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.22.63.91 (91.63.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.63.91 (91.63.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:53:29.769601 2026] [security2:error] [pid 29910:tid 29910] [client 34.22.63.91:54624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.itimetable21.com"] [uri "/.git/config"] [unique_id "atGfuX7eFel4CXGtOW3wuAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-16 03:48:12
(1 day ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
masterguru
2026-10-16 03:28:01
(1 day ago)
Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\ ...
show more
Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})| (932130-164)
show less
Hacking
🇩🇪
svr
2026-10-16 02:37:31
(1 day ago)
Abusive Automated Web Scanner
Web App Attack