π§πͺ
cmbplf
2026-10-18 08:30:04
(4 days ago)
2.074 requests with url.path *.env
348 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
πΊπΈ
TPI-Abuse
2026-10-18 05:04:35
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.2.193 (193.2.50.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.2.193 (193.2.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 01:04:32.279219 2026] [security2:error] [pid 14549:tid 14549] [client 34.50.2.193:41386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pistonsociety.com"] [uri "/.git/config"] [unique_id "atRTYBnT4qS8aRBalA2mRQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-18 04:00:27
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.2.193 (193.2.50.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.2.193 (193.2.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 00:00:19.228969 2026] [security2:error] [pid 4012:tid 4012] [client 34.50.2.193:54284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pist.org.tr"] [uri "/.git/config"] [unique_id "atREU_MzTgzY0tPUGNyl0AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Savvii
2026-10-18 03:36:38
(4 days ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
zumbo.net
2026-10-18 01:08:01
(5 days ago)
[Sun Oct 18 04:07:59.427272 2026] [proxy_fcgi:error] [pid 1759494:tid 1759543] [client 34.50.2.193:0 ...
show more
[Sun Oct 18 04:07:59.427272 2026] [proxy_fcgi:error] [pid 1759494:tid 1759543] [client 34.50.2.193:0] AH01071: Got error 'Primary script unknown'
[Sun Oct 18 04:07:59.666170 2026] [proxy_fcgi:error] [pid 1759494:tid 1759542] [client 34.50.2.193:0] AH01071: Got error 'Primary script unknown'
[Sun Oct 18 04:07:59.903669 2026] [proxy_fcgi:error] [pid 1759493:tid 1759524] [client 34.50.2.193:0] AH01071: Got error 'Primary script unknown'
[Sun Oct 18 04:08:00.144204 2026] [proxy_fcgi:error] [pid 1759494:tid 1759533] [client 34.50.2.193:0] AH01071: Got error 'Primary script unknown'
[Sun Oct 18 04:08:00.386646 2026] [proxy_fcgi:error] [pid 1759494:tid 1759545] [client 34.50.2.193:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
π³π±
Alt255
2026-10-18 00:31:18
(5 days ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.50.2.193 - - [18/Oct/2026:02:30:57 +0200] "GET /.git/config HTTP/1.1" 404 418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
π©πͺ
FeG Deutschland
2026-10-18 00:15:57
(5 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
π³π±
Site.eu
2026-10-18 00:00:50
(5 days ago)
Excessive multi-domain requests
Brute-Force
π©πͺ
zumbo.net
2026-10-17 23:56:18
(5 days ago)
[Sun Oct 18 02:56:16.202912 2026] [proxy_fcgi:error] [pid 2586614:tid 2586631] [client 34.50.2.193:0 ...
show more
[Sun Oct 18 02:56:16.202912 2026] [proxy_fcgi:error] [pid 2586614:tid 2586631] [client 34.50.2.193:0] AH01071: Got error 'Primary script unknown'
[Sun Oct 18 02:56:16.479459 2026] [proxy_fcgi:error] [pid 2586614:tid 2586658] [client 34.50.2.193:0] AH01071: Got error 'Primary script unknown'
[Sun Oct 18 02:56:16.755693 2026] [proxy_fcgi:error] [pid 2586614:tid 2586634] [client 34.50.2.193:0] AH01071: Got error 'Primary script unknown'
[Sun Oct 18 02:56:17.030351 2026] [proxy_fcgi:error] [pid 2586614:tid 2586629] [client 34.50.2.193:0] AH01071: Got error 'Primary script unknown'
[Sun Oct 18 02:56:17.305386 2026] [proxy_fcgi:error] [pid 2586614:tid 2586662] [client 34.50.2.193:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
πΈπͺ
vaia.cloud
2026-10-17 23:45:02
(5 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
π©πͺ
konseptit
2026-10-17 23:34:22
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.50.2.193 (KR/South Korea/193.2.50.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.50.2.193 (KR/South Korea/193.2.50.34.bc.googleusercontent.com)
show less
SQL Injection
πΊπΈ
TPI-Abuse
2026-10-17 17:27:35
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.2.193 (193.2.50.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.2.193 (193.2.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 13:27:31.743832 2026] [security2:error] [pid 8892:tid 8892] [client 34.50.2.193:54614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "markramsperger.com"] [uri "/.git/config"] [unique_id "atOwAx6Vx96Z6UJu2ih5xgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
webanyone
2026-10-17 16:53:55
(5 days ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebK ...
show more
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
Anonymous
2026-10-17 16:44:30
(5 days ago)
Aggressive web scan
Web App Attack
π©πͺ
rh24
2026-10-17 16:13:54
(5 days ago)
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.50.2.193 (KR/South Korea/193.2.50.34.b ...
show more
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.50.2.193 (KR/South Korea/193.2.50.34.bc.googleusercontent.com)
show less
Hacking