Anonymous
2026-10-22 21:07:03
(13 minutes ago)
Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-10-22 20:09:40.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-22 13:14:33
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.50.121.129 (129.121.50.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.121.129 (129.121.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 09:14:25.776629 2026] [security2:error] [pid 31657:tid 31657] [client 34.50.121.129:52968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qwixel.com"] [uri "/.git/config"] [unique_id "atoMMadgkrzkmo4TaGZNKAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
patrisei
2026-10-22 13:11:13
(8 hours ago)
You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-sensitive-fil ...
show more
You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-sensitive-files
show less
Port Scan
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-22 13:02:29
(8 hours ago)
Excessive 404/403 errors
Brute-Force
๐น๐ท
Jova
2026-10-22 12:09:11
(9 hours ago)
Probing a web server for sensitive files (.env, backups, configs): 3 requests.
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-22 12:00:00
(9 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ช๐ธ
pipeline.es
2026-10-22 11:26:13
(9 hours ago)
Web scanning / probing for vulnerable paths | URL: /v3/.env | Evidence: qwaytravel.com 34.50.121.129 ...
show more
Web scanning / probing for vulnerable paths | URL: /v3/.env | Evidence: qwaytravel.com 34.50.121.129 - - [22/Oct/2026:13:25:12 +0200] \"GET /v3/.env HTTP/1.1\" 404 29422 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=ID 19290 | ASN: GOOGLE-CLOUD-PLATFORM | Country: ID
show less
Port Scan
Web App Attack
๐ฉ๐ช
EGP Abuse Dept
2026-10-22 08:17:23
(13 hours ago)
Scanning for web/db/file exploits on qusedpallets.com
SQL Injection
Bad Web Bot
Web App Attack
Anonymous
2026-10-22 07:54:01
(13 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
๐ณ๐ฑ
Site.eu
2026-10-22 05:36:21
(15 hours ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-22 05:34:08
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.50.121.129 (129.121.50.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.121.129 (129.121.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 01:34:02.467030 2026] [security2:error] [pid 15977:tid 15977] [client 34.50.121.129:59014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "segeln-in-phuket.com"] [uri "/.git/config"] [unique_id "atmgSkt_34VxD6zAYaA0JQAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
sefinek.net
2026-10-22 04:50:39
(16 hours ago)
Triggered Cloudflare WAF (firewallCustom) from ID.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from ID.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /firebase-key.json | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-22 04:11:41
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.50.121.129 (129.121.50.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.121.129 (129.121.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:11:37.356885 2026] [security2:error] [pid 24902:tid 24902] [client 34.50.121.129:39266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seethrume.com"] [uri "/.git/config"] [unique_id "atmM-cQt1qKkLFfQTAT47QAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
dot.mg
2026-10-22 02:26:02
(18 hours ago)
Bad behaviour
Web Spam
๐ฉ๐ช
FeG Deutschland
2026-10-22 02:22:59
(18 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack