π³π±
homeshowdomain.nl
2026-10-17 21:59:39
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-16.
show less
Web App Attack
SSH
Hacking
π©πͺ
todix
2026-10-16 13:10:34
(3 days ago)
"GET /.git/config HTTP/1.1" 403 6474 "-" "-"
Web App Attack
πΊπΈ
lnklnx
2026-10-16 12:27:01
(3 days ago)
www.lnklnx.com:443 34.7.36.197 - - [16/Oct/2026:07:27:00 -0500] "GET /.git/config HTTP/1.1" 403 5725 ...
show more
www.lnklnx.com:443 34.7.36.197 - - [16/Oct/2026:07:27:00 -0500] "GET /.git/config HTTP/1.1" 403 5725 "-" "-"
...
show less
Web App Attack
ππΊ
bcsaba
2026-10-16 12:21:38
(3 days ago)
Probing for .git:
34.7.36.197 - - [16/Oct/2026:14:21:36 +0200] "GET /.git/config HTTP/1.1" 403 146 " ...
show more
Probing for .git:
34.7.36.197 - - [16/Oct/2026:14:21:36 +0200] "GET /.git/config HTTP/1.1" 403 146 "-" "-"
show less
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 12:07:53
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.7.36.197 (197.36.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.36.197 (197.36.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:07:46.179873 2026] [security2:error] [pid 29756:tid 29756] [client 34.7.36.197:43406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lmga.net"] [uri "/.git/config"] [unique_id "atITksLd6UWu2SOgQMAryAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 11:52:36
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.7.36.197 (197.36.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.36.197 (197.36.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:52:33.408949 2026] [security2:error] [pid 4061:tid 4061] [client 34.7.36.197:49992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "llew.life.78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [uri "/.git/config"] [unique_id "atIQAWi9lJVEAAYeKeqHqQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 11:25:51
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.7.36.197 (197.36.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.36.197 (197.36.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:25:45.832164 2026] [security2:error] [pid 25097:tid 25097] [client 34.7.36.197:43222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lizlemos.org.rejuvenationsystems.com"] [uri "/.git/config"] [unique_id "atIJufDuUmsB41R3R-DFTgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
netclix.gr
2026-10-16 11:13:50
(3 days ago)
(security_scan) Sensitive File Scan Blocked 34.7.36.197 (197.36.7.34.bc.googleusercontent.com)
Hacking
π¬π§
thetomtaylor.co.uk
2026-10-16 11:05:04
(3 days ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 11:01:42
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.7.36.197 (197.36.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.36.197 (197.36.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:01:38.274041 2026] [security2:error] [pid 26498:tid 26498] [client 34.7.36.197:49536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "livesteamtracks.info"] [uri "/.git/config"] [unique_id "atIEEtT1LHLzQfVaJLfH4AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Alt255
2026-10-16 10:59:52
(3 days ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.7.36.197 - - \[16/Oct/2026:12:59:42 +0200\] "GET /.git/config HTTP/1.1" 404 7419 "-" "-"
...
show less
Bad Web Bot
Web App Attack
π§πͺ
cmbplf
2026-10-16 10:52:49
(3 days ago)
749 requests with url.path */.git/config
235 requests with url.path *.git/*
Brute-Force
Bad Web Bot
Anonymous
2026-10-16 10:49:19
(3 days ago)
Scanner hitting /.git/config on livekit.ara-oman.com (GOOGL-2) β aaguard
Brute-Force
Port Scan
πΊπΈ
TPI-Abuse
2026-10-16 10:40:07
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.7.36.197 (197.36.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.36.197 (197.36.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:39:59.334654 2026] [security2:error] [pid 26555:tid 26555] [client 34.7.36.197:60782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "livebord.com"] [uri "/.git/config"] [unique_id "atH-_-Fl_QvX_4gFy4oGAAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 10:14:19
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.7.36.197 (197.36.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.36.197 (197.36.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:14:14.367976 2026] [security2:error] [pid 26270:tid 26270] [client 34.7.36.197:42206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "littlebiglebanon.com"] [uri "/.git/config"] [unique_id "atH49kutkfPW1jY4nlcsiwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack