🇳🇱
Alt255
2026-10-26 21:24:43
(14 hours ago)
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34 ...
show more
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.57.9.7 - - [23/Oct/2026:23:15:38 +0200] "GET /.git/config HTTP/1.1" 404 6019 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-25 13:13:24
(1 day ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.57.9.7 - - \[23/Oct/2026:22:38:58 +0200\] "GET /.git/config HTTP/1.1" 404 7961 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-24 22:00:19
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-23.
show less
Web App Attack
SSH
Hacking
🇺🇸
francelink.fr
2026-10-24 09:21:30
(3 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-23T21:18:17.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 21:52:20
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.57.9.7 (7.9.57.34.bc.googleusercontent.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.9.7 (7.9.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:52:14.676091 2026] [security2:error] [pid 25503:tid 25503] [client 34.57.9.7:43930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.treeofloveproductions.com"] [uri "/.git/config"] [unique_id "atvXDri79vvSOwZu90N97AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 21:31:21
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.57.9.7 (7.9.57.34.bc.googleusercontent.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.9.7 (7.9.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:31:15.857138 2026] [security2:error] [pid 27745:tid 27745] [client 34.57.9.7:39438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.travelimts.com"] [uri "/.git/config"] [unique_id "atvSI93O7iOhNlaZZXHJYAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-10-23 21:23:30
(3 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇫🇷
masterguru
2026-10-23 21:14:50
(3 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 21:10:00
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.57.9.7 (7.9.57.34.bc.googleusercontent.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.9.7 (7.9.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:09:56.378565 2026] [security2:error] [pid 657:tid 657] [client 34.57.9.7:42056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.translation.cspminc.com"] [uri "/.git/config"] [unique_id "atvNJAZeJvQaa7OLmY-sqwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-23 21:08:03
(3 days ago)
Secret file probe | method: GET | path: /.git/config | ua: -
Hacking
Web App Attack
🇫🇷
dynamix
2026-10-23 21:02:39
(3 days ago)
Multiple WAF Violations
Web App Attack
🇳🇱
mieg
2026-10-23 21:00:20
(3 days ago)
Web vulnerability probing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 20:49:13
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.57.9.7 (7.9.57.34.bc.googleusercontent.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.9.7 (7.9.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 16:49:09.553366 2026] [security2:error] [pid 22015:tid 22015] [client 34.57.9.7:38470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.trainingbysteve.pages4you.com"] [uri "/.git/config"] [unique_id "atvIRRr0h8tzpu9i0p1uAgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-23 20:39:04
(3 days ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.57.9.7 - - \[23/Oct/2026:22:38:58 +0200\] "GET /.git/config HTTP/1.1" 404 7961 "-" "-"
...
show less
Bad Web Bot
Web App Attack
2026-10-23 20:25:04
(3 days ago)
suspicious request in access.log
Web App Attack