🇳🇱
homeshowdomain.nl
2026-11-04 23:03:46
UTC ·
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-03.
Web App Attack
SSH
Hacking
2026-11-04 19:15:11
UTC ·
(2 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: BE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-11-03 23:13:01
UTC ·
(2 days ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Alt255
2026-11-03 22:38:30
UTC ·
(2 days ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.77.86.228 - - [03/Nov/2026:23:38:14 +0100] "GET /.git/config HTTP/1.1" 301 618 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.77.86.228 - - [03/Nov/2026:23:38:14 +0100] "GET /.git/config HTTP/1.1" 301 618 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-11-03 19:13:45
UTC ·
(3 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: BE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 18:33:40
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.77.86.228 (228.86.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:33:36.176687 2026] [security2:error] [pid 19631:tid 19 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.86.228 (228.86.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:33:36.176687 2026] [security2:error] [pid 19631:tid 19631] [client 34.77.86.228:42662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "independentmusicconference.com"] [uri "/.git/config"] [unique_id "auopAKITL5LqxBiWtyPi5wAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-03 12:26:41
UTC ·
(3 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 08:07:47
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.77.86.228 (228.86.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:07:41.801708 2026] [security2:error] [pid 27468:tid 27 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.86.228 (228.86.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:07:41.801708 2026] [security2:error] [pid 27468:tid 27468] [client 34.77.86.228:35014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iwriteitall.com"] [uri "/.git/config"] [unique_id "aumWTfxvi-nLbMlQH0230AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
pscriptos
2026-11-03 07:34:32
UTC ·
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-03 03:57:43
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.77.86.228 (228.86.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:57:38.410137 2026] [security2:error] [pid 25887:tid 25 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.86.228 (228.86.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:57:38.410137 2026] [security2:error] [pid 25887:tid 25887] [client 34.77.86.228:48262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iworklife.org"] [uri "/.git/config"] [unique_id "aulbspe9yxesKVLs2n6plQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-03 01:08:16
UTC ·
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
iwle
2026-11-02 22:52:52
UTC ·
(3 days ago)
[Mon Nov 02 17:52:51.173591 2026] [:error] [pid 217536:tid 217578] [client 34.77.86.228:0] [client 34.77.86.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.p ...
show more
[Mon Nov 02 17:52:51.173591 2026] [:error] [pid 217536:tid 217578] [client 34.77.86.228:0] [client 34.77.86.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "iwle.com"] [uri "/.env"] [unique_id "aukUQ48ny7vxiHubGh_HwAAAAQ4"]
[Mon Nov 02 17:52:51.637800 2026] [:error] [pid 1654:tid 1744] [client 34.77.86.228:0] [client 34.77.86.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.
...
show less
Bad Web Bot
Web App Attack
2026-11-02 22:03:12
UTC ·
(3 days ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇲🇾
Rizzy
2026-11-02 09:40:47
UTC ·
(4 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
2026-11-02 09:23:05
UTC ·
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
