🇳🇱
Alt255
2026-09-17 04:35:08
(3 hours ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.35.58.147 - - [17/Sep/2026:06:34:48 +0200] "GET /.git/config HTTP/1.1" 301 632 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 04:18:12
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.35.58.147 (147.58.35.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.35.58.147 (147.58.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 00:18:05.026642 2026] [security2:error] [pid 8339:tid 8339] [client 34.35.58.147:49480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "recipes.mikeneame.com"] [uri "/.git/config"] [unique_id "aqtp_WZDew3YZHHpqun3XgAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-09-17 03:47:43
(4 hours ago)
Login credentials theft attempt
Hacking
🇸🇪
vaia.cloud
2026-09-17 03:30:03
(4 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-09-17 02:24:41
(6 hours ago)
Multiple WAF Violations
Web App Attack
🇧🇾
lns.bz
2026-09-17 02:21:54
(6 hours ago)
Too many 404 requests [BY]
Web App Attack
🇵🇱
Niko's Stuff
2026-09-16 15:11:20
(17 hours ago)
Triggered crowdsecurity/http-sensitive-files. More information at: https://app.crowdsec.net/cti/34.3 ...
show more
Triggered crowdsecurity/http-sensitive-files. More information at: https://app.crowdsec.net/cti/34.35.58.147
show less
Web App Attack
Hacking
🇫🇮
kumiko
2026-09-16 15:10:01
(17 hours ago)
[2026-09-16 18:10:00] Probing for dotfiles
"GET /.git/config HTTP/1.1" 403
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 12:41:57
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.35.58.147 (147.58.35.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.35.58.147 (147.58.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:41:52.538727 2026] [security2:error] [pid 29963:tid 29963] [client 34.35.58.147:51526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nigunensemble.net"] [uri "/.git/config"] [unique_id "aqqOkCUr1M6ai7tLoMfXMQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-09-16 12:07:39
(20 hours ago)
csagent: score 21.5: 404 noise floor x6, secrets grab x2; 1 domain(s) in 0s
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-16 11:26:13
(21 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
2026-09-16 11:16:03
(21 hours ago)
Bot / scanning and/or hacking attempts: GET /.env.development HTTP/1.1, GET /.env HTTP/1.1, GET /.gi ...
show more
Bot / scanning and/or hacking attempts: GET /.env.development HTTP/1.1, GET /.env HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.staging HTTP/1.1, POST / HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 11:14:06
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.35.58.147 (147.58.35.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.35.58.147 (147.58.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 07:14:02.575500 2026] [security2:error] [pid 31645:tid 31645] [client 34.35.58.147:53374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "odinscelestialtrust.org"] [uri "/.git/config"] [unique_id "aqp5-m0eFe-8ICQzD8qF3gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
zXero
2026-09-16 10:55:02
(21 hours ago)
Fail2Ban automatic report - jail: web-exploit
Brute-Force
SSH
DDoS Attack
🇺🇸
TPI-Abuse
2026-09-16 10:52:52
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.35.58.147 (147.58.35.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.35.58.147 (147.58.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:52:45.394062 2026] [security2:error] [pid 1578:tid 1578] [client 34.35.58.147:57186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "odinathletes.com"] [uri "/.git/config"] [unique_id "aqp0_T2bN0qnbEVxBGgw0wAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack