2026-09-01 13:55:29
(2 hours ago)
fail2ban: apache-secrets-scan jail (1 hits in 2419200s) on skipper
Web App Attack
Hacking
🇩🇪
Gwyneth Llewelyn
2026-09-01 13:36:59
(2 hours ago)
2026/09/01 14:36:48 [error] 380594#380594: *2080951 access forbidden by rule, client: 34.64.136.2, s ...
show more
2026/09/01 14:36:48 [error] 380594#380594: *2080951 access forbidden by rule, client: 34.64.136.2, server: regapi.betatechnologies.info, request: "GET /.env HTTP/1.1", host: "regapi.betatechnologies.info"
34.64.136.2 - - [01/Sep/2026:14:36:48 +0100] "GET /.env HTTP/1.1" 403 1178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/09/01 14:36:57 [error] 380594#380594: *2080951 access forbidden by rule, client: 34.64.136.2, server: regapi.betatechnologies.info, request: "GET /app/.env HTTP/1.1", host: "regapi.betatechnologies.info"
show less
Brute-Force
Web App Attack
2026-09-01 09:34:35
(6 hours ago)
Banned by Fail2Ban on server
Web App Attack
🇫🇷
masterguru
2026-09-01 07:59:50
(8 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇫🇷
masterguru
2026-09-01 07:34:49
(8 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇬🇧
Swiptly
2026-09-01 07:08:10
(9 hours ago)
Excessive 403/404/405 PHP/CMS errors from scanning or broken bots
...
Web App Attack
🇿🇦
conure.sh
2026-09-01 06:45:28
(9 hours ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 1s
Web App Attack
🇬🇧
Apache
2026-09-01 05:01:16
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.136.2 (KR/South Korea/2.136.64.34.bc.goog ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.136.2 (KR/South Korea/2.136.64.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇳🇱
Mangelot Hosting
2026-09-01 00:44:31
(15 hours ago)
(modsecurity) srv102 ModSecurity 34.64.136.2 (KR/South Korea/2.136.64.34.bc.googleusercontent.com): ...
show more
(modsecurity) srv102 ModSecurity 34.64.136.2 (KR/South Korea/2.136.64.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:41:29
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.136.2 (2.136.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.136.2 (2.136.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:41:23.579407 2026] [security2:error] [pid 26718:tid 26718] [client 34.64.136.2:59070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reettaanttila.com"] [uri "/.git/config"] [unique_id "apYfM_4SawQqG2XsxY_1CQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
i-turnradio.nl
2026-08-31 21:30:49
(18 hours ago)
2026-08-31 @ 23:30:48 (CET) ~ Blocked for trying to access: /.env.local
Web App Attack
🇳🇱
e.fierstra
2026-08-31 20:53:33
(19 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-08-31 20:45:06
(19 hours ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 20:06:17
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.136.2 (2.136.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.136.2 (2.136.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 16:06:14.571940 2026] [security2:error] [pid 2006:tid 2006] [client 34.64.136.2:35920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rivervinylcafe.info"] [uri "/.git/config"] [unique_id "apXetn9Zgy-QjJlAzOJrXQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 19:29:10
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.136.2 (2.136.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.136.2 (2.136.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 15:29:07.209419 2026] [security2:error] [pid 1003105:tid 1003169] [client 34.64.136.2:47022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "riversideturners.com"] [uri "/.git/config"] [unique_id "apXWA-B5gC5VWW9Qza_shAAAAYM"]
show less
Brute-Force
Bad Web Bot
Web App Attack