🇳🇱
ipoac.nl
2026-09-29 14:20:43
(14 hours ago)
-:443 34.67.113.90 - - [29/Sep/2026:16:20:40 +0200] - "GET /.git/config HTTP/1.1" 404 2021 "-" "Mozi ...
show more
-:443 34.67.113.90 - - [29/Sep/2026:16:20:40 +0200] - "GET /.git/config HTTP/1.1" 404 2021 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Bad Web Bot
🇫🇷
masterguru
2026-09-29 00:57:45
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 00:53:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:53:44.190626 2026] [security2:error] [pid 4518:tid 4518] [client 34.67.113.90:46228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.transportdelivery.com"] [uri "/.git/config"] [unique_id "arsMGLWHYrD7EI8c13aXJwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-29 00:01:45
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 07:19:45
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 03:19:37.744210 2026] [security2:error] [pid 31929:tid 31929] [client 34.67.113.90:36464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "volunteergems.com"] [uri "/.git/config"] [unique_id "aroVCS-YBDeQi-td_eCWZwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-27 00:31:42
(3 days ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.67.113.90 - - \[27/Sep/2026:02:31:23 +0200\] "GET /.git/config HTTP/1.1" 301 697 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 20:23:50
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 16:23:43.615078 2026] [security2:error] [pid 6103:tid 6103] [client 34.67.113.90:35664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.aslproud.com"] [uri "/.git/config"] [unique_id "argpz3GdKNk47lRq3nPXVwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-26 10:03:27
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 09:57:07
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 05:56:59.630629 2026] [security2:error] [pid 30117:tid 30117] [client 34.67.113.90:35280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web1.pnp42.com"] [uri "/.git/config"] [unique_id "areW6_2uuCX4Yc_uWwAScQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-26 09:55:40
(3 days ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-09-26 09:02:53
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 05:02:49.695203 2026] [security2:error] [pid 13966:tid 13966] [client 34.67.113.90:35252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web142.dnchosting.com"] [uri "/.git/config"] [unique_id "areKOSWTjX0OHYkq8HFHDQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 04:04:52
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:04:48.372229 2026] [security2:error] [pid 17252:tid 17252] [client 34.67.113.90:48394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.landscapedesignworkshop.com"] [uri "/.git/config"] [unique_id "arShYJymv3jFb-bFCIrpbgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-09-24 02:23:20
(6 days ago)
[ThuSep2404:23:13.9710132026][security2:error][pid3011750:tid3011840][client34.67.113.90:0]ModSecuri ...
show more
[ThuSep2404:23:13.9710132026][security2:error][pid3011750:tid3011840][client34.67.113.90:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webdisk.lacer.ch\"][uri\"/.env.bak\"][unique_id\"arSJkQWbcjQoQmejiI03FQAAAMU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-22 22:06:08
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-21.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-21 11:04:53
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.113.90 (90.113.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 07:04:49.340594 2026] [security2:error] [pid 19270:tid 19270] [client 34.67.113.90:44156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.advisorstudios.cms2020.com"] [uri "/.git/config"] [unique_id "arEPUUoGpo05MRjGD9LgWwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
