🇳🇱
Alt255
2026-11-03 20:52:53
UTC ·
(5 days ago)
[ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.64.232.182 - - [03/Nov/2026:21:52:43 +0100] "GET /.git/config HTTP/1.1" 301 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ...
show more
[ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.64.232.182 - - [03/Nov/2026:21:52:43 +0100] "GET /.git/config HTTP/1.1" 301 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-03 16:58:41
UTC ·
(5 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 14:35:31
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.64.232.182 (182.232.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 09:35:23.533364 2026] [security2:error] [pid 24625:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.232.182 (182.232.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 09:35:23.533364 2026] [security2:error] [pid 24625:tid 24625] [client 34.64.232.182:37408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scrippshs.org"] [uri "/.git/config"] [unique_id "aunxK4v6hmofBG4KJdGkIwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-03 12:22:30
UTC ·
(6 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
2026-11-02 22:38:08
UTC ·
(6 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
moppetto
2026-11-02 13:12:14
UTC ·
(1 week ago)
.git/config credential scraping; GET /.git/config
Bad Web Bot
2026-11-02 13:10:05
UTC ·
(1 week ago)
| [Dangerous/South Korea] Aggressive IP 34.64.232.182 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-11-02 10:43:01
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.64.232.182 (182.232.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 05:42:54.024705 2026] [security2:error] [pid 14708:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.232.182 (182.232.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 05:42:54.024705 2026] [security2:error] [pid 14708:tid 14708] [client 34.64.232.182:46634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "setx-law.com"] [uri "/.git/config"] [unique_id "auhpLi6wJUhHFkibA7rvmAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-11-02 10:41:54
UTC ·
(1 week ago)
(mod_security) mod_security (id:11000011) triggered by 34.64.232.182 (KR/South Korea/Seoul/Seoul/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:41:53.820458 2026] [ ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.64.232.182 (KR/South Korea/Seoul/Seoul/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:41:53.820458 2026] [security2:error] [pid 180939:tid 181121] [client 34.64.232.182:49408] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 182.232.64.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "setworldup.com"] [uri "/"] [unique_id "auho8UryM3u04IzvmCnzEAAAAdY"]
show less
Port Scan
