2026-11-03 12:29:24
UTC ·
(3 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
2026-11-03 05:03:07
UTC ·
(3 days ago)
Bot / scanning and/or hacking attempts: GET /index.php HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /.env.live HTTP/1.1, GET /.env.ci HTTP/1.1, GET /.env.docker HTTP/1.1
Hacking
Web App Attack
🇳🇱
Alt255
2026-11-02 22:56:09
UTC ·
(3 days ago)
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.70.35.188 - - [02/Nov/2026:23:56:08 +0100] "GET /.git/config HTTP/1.1" 301 598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. ...
show more
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.70.35.188 - - [02/Nov/2026:23:56:08 +0100] "GET /.git/config HTTP/1.1" 301 598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-11-02 22:25:42
UTC ·
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇦🇹
penguin-solutions.at
2026-11-02 21:33:31
UTC ·
(3 days ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
🇩🇪
LRob
2026-11-02 19:35:41
UTC ·
(3 days ago)
Secret file probe | method: GET | path: /.git/config, /.env | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 19:35:08
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.70.35.188 (188.35.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 14:35:05.227075 2026] [security2:error] [pid 12388:tid 12 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.70.35.188 (188.35.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 14:35:05.227075 2026] [security2:error] [pid 12388:tid 12388] [client 34.70.35.188:45024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eovdcconsulting.eu"] [uri "/.git/config"] [unique_id "aujl6Wbhupw0KG_KGzS3qQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-02 15:23:52
UTC ·
(4 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-11-02 14:50:13
UTC ·
(4 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-11-02 14:16:19
UTC ·
(4 days ago)
[Mon Nov 02 15:16:18.703781 2026] [security2:error] [pid 1768899:tid 1768901] [client 34.70.35.188:0] [client 34.70.35.188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/sh ...
show more
[Mon Nov 02 15:16:18.703781 2026] [security2:error] [pid 1768899:tid 1768901] [client 34.70.35.188:0] [client 34.70.35.188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "us.mmn.ca"] [uri "/"] [unique_id "auibMjtCo_tDxben9fKzJgAAAAA"]
[Mon Nov 02 15:16:18.943173 2026] [security2:error] [pid 1768899:tid 1768925] [client 34.70.35.188:0] [client 34.70.35.188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation
...
show less
Web App Attack
Bad Web Bot
🇩🇪
ecs.ge
2026-11-02 12:40:30
UTC ·
(4 days ago)
Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.
Web App Attack
Hacking
🇿🇦
conure.sh
2026-11-02 12:09:15
UTC ·
(4 days ago)
csagent: score 20.3: secrets grab x2, 404 noise floor x2; 1 domain(s) in 12s
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 09:14:44
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.70.35.188 (188.35.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 04:14:41.168420 2026] [security2:error] [pid 1048418:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.70.35.188 (188.35.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 04:14:41.168420 2026] [security2:error] [pid 1048418:tid 1048432] [client 34.70.35.188:52702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "movetodc.com"] [uri "/.git/config"] [unique_id "auhUgcEKScoZEKf-a9EEqAAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
