๐ณ๐ฑ
Alt255
2026-10-25 13:13:49
(18 hours ago)
[ti-12al] Web exploit scanning: 69 suspicious requests detected by fail2ban jail <name>. Example: 34 ...
show more
[ti-12al] Web exploit scanning: 69 suspicious requests detected by fail2ban jail <name>. Example: 34.78.112.2 - - \[23/Oct/2026:02:45:29 +0200\] "GET /.git/config HTTP/2.0" 404 1864 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36"
34.78.112.2 - - \[23/Oct/2026:02:45:29 +0200\] "GET /.env HTTP/2.0" 404 1951 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36"
34.78.112.2 - - \[23/Oct/2026:02:45:29 +0200\] "GET /.env.example HTTP/2.0" 404 1864 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36"
34.78.112.2 - - \[23/Oct/2026:02:45:29 +0200\] "GET /.git/logs/HEAD HTTP/2.0" 404 1864 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36"
34.78.112.2 - - \[23/Oct/2026:02:45:29 +0200\] "GET /.aws/credential
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-24 22:15:00
(1 day ago)
Trying to access config files
Web App Attack
๐ง๐ช
boxed-it
2026-10-24 14:50:37
(1 day ago)
GET /.git/config (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
Anonymous
2026-10-24 05:52:24
(2 days ago)
GET / | rule: automated-client-blocked | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 ...
show more
GET / | rule: automated-client-blocked | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 | net: Google LLC AS396982
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-23 04:36:53
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.78.112.2 (2.112.78.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.112.2 (2.112.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 00:36:49.563168 2026] [security2:error] [pid 28458:tid 28458] [client 34.78.112.2:46278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yeejia.net"] [uri "/.git/config"] [unique_id "atrkYZ30d33ddChxY63UXwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-23 04:16:03
(3 days ago)
GET / | rule: automated-client-blocked | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 ...
show more
GET / | rule: automated-client-blocked | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
EmilGH
2026-10-23 04:13:46
(3 days ago)
34.78.112.2 - - [23/Oct/2026:04:13:45 +0000] "GET /.git/config HTTP/1.1" 403 875 "-" "Mozilla/5.0 (W ...
show more
34.78.112.2 - - [23/Oct/2026:04:13:45 +0000] "GET /.git/config HTTP/1.1" 403 875 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.78.112.2 - - [23/Oct/2026:04:13:45 +0000] "GET /.env HTTP/1.1" 403 536 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.78.112.2 - - [23/Oct/2026:04:13:45 +0000] "GET /.git/logs/HEAD HTTP/1.1" 403 536 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.78.112.2 - - [23/Oct/2026:04:13:45 +0000] "GET /.env.example HTTP/1.1" 403 860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.78.112.2 - - [23/Oct/2026:04:13:45 +0000] "GET /backend/.env HTTP/1.1" 403 860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.78.112.2 - - [23/Oct/2026:04:13:45 +0000] "GET /.aws/credentials HTTP/1.1" 403 860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.78.112.2 - - [23/Oct/2026:04:13:45 +0000] "GET /config.json HTTP/1.1" 404 857 "-" "Mozilla/5.0 (Windows NT
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
ELYAZ
2026-10-23 04:12:27
(3 days ago)
(y3) Failed access -byebye- from 34.78.112.2 (BE/Belgium/2.112.78.34.bc.googleusercontent.com): (CF ...
show more
(y3) Failed access -byebye- from 34.78.112.2 (BE/Belgium/2.112.78.34.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-23 04:08:53
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.78.112.2 (2.112.78.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.112.2 (2.112.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 00:08:49.516946 2026] [security2:error] [pid 9769:tid 9769] [client 34.78.112.2:48482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yankeetownfishing.com"] [uri "/.git/config"] [unique_id "atrd0WWdwAJtW-Y3_I1yVQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
CentiDevOps
2026-10-23 04:08:21
(3 days ago)
Web app scan: 34 requests in 0 s across 2 domains (301/444). Paths: /.git/config, /.git/logs/HEAD, / ...
show more
Web app scan: 34 requests in 0 s across 2 domains (301/444). Paths: /.git/config, /.git/logs/HEAD, /.env (+17 more). Sample: 2026-10-23T04:08:21Z "GET /app/.env" 301
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 03:50:09
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.78.112.2 (2.112.78.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.78.112.2 (2.112.78.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 23:50:04.638288 2026] [security2:error] [pid 15088:tid 15114] [client 34.78.112.2:38230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yakamengen.com"] [uri "/.env"] [unique_id "atrZbOwibyfQpLehFNk2OAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-23 03:46:36
(3 days ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
๐บ๐ธ
Rip
2026-10-23 03:45:02
(3 days ago)
Restricted File Access Attempts
Port Scan
Web App Attack
๐ฉ๐ช
enjoyably
2026-10-23 03:31:51
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ฉ๐ช
ger-stg-sifi1
2026-10-23 03:25:27
(3 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack