🇳🇱
Alt255
2026-11-15 03:34:28
UTC ·
(22 minutes ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.88.77.87 - - [15/Nov/2026:04:34:15 +0100] "GET /.git/config HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKi ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.88.77.87 - - [15/Nov/2026:04:34:15 +0100] "GET /.git/config HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇹🇷
bdkreatif
2026-11-15 03:08:48
UTC ·
(48 minutes ago)
Automated block: probing for backup files
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 02:56:55
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.88.77.87 (87.77.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 21:56:48.062535 2026] [security2:error] [pid 2051766:tid 20 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.77.87 (87.77.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 21:56:48.062535 2026] [security2:error] [pid 2051766:tid 2051766] [client 34.88.77.87:58738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "songwriterdemo.com"] [uri "/.git/config"] [unique_id "avkfcC-JRPQGp86vDZd0YAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-15 01:25:44
UTC ·
(2 hours ago)
34.88.77.87 - - [15/Nov/2026:02:25:43 +0100] "GET /.git/config HTTP/1.1" 404 150 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
SSH
🇩🇪
lolyay
2026-11-15 01:18:39
UTC ·
(2 hours ago)
34.88.77.87 - - [15/Nov/2026:01:18:38 +0000] "GET /.git/config HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.77.87 - - [15/Nov/2026:01:18:38 +0000] "G ...
show more
34.88.77.87 - - [15/Nov/2026:01:18:38 +0000] "GET /.git/config HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.77.87 - - [15/Nov/2026:01:18:38 +0000] "GET /.env HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Bad Web Bot
🇫🇷
dynamix
2026-11-15 00:01:38
UTC ·
(3 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇮
kumiko
2026-11-14 23:49:14
UTC ·
(4 hours ago)
[2026-11-15 01:49:14] Apache auth failure: brute force attempt, file probing
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-14 23:44:07
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.77.87 (87.77.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:44:00.423770 2026] [security2:error] [pid 14871:tid 1488 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.77.87 (87.77.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:44:00.423770 2026] [security2:error] [pid 14871:tid 14885] [client 34.88.77.87:37450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sonatro.io"] [uri "/.git/config"] [unique_id "avjyQLGoA7V9MCwTVyaA3gAAAUw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-14 23:00:37
UTC ·
(4 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-13.
Web App Attack
SSH
Hacking
2026-11-14 16:32:55
UTC ·
(11 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇳🇱
Site.eu
2026-11-14 10:20:54
UTC ·
(17 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
2026-11-14 10:02:35
UTC ·
(17 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇳🇱
middelkoopcc
2026-11-13 18:29:26
UTC ·
(1 day ago)
2026-11-13 19:24:53 GET /.git/config [404] && 2026-11-13 19:24:56 GET /.env [404] && 2026-11-13 19:25:05 GET /.env.bak [404] && 133 more within 20 minutes
Web App Attack
🇩🇪
Klompenzijncool
2026-11-13 16:44:21
UTC ·
(1 day ago)
Web scanning/probing blocked by Fail2Ban.
Port Scan
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-13 02:41:24
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.77.87 (87.77.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:41:18.743447 2026] [security2:error] [pid 22304:tid 2235 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.77.87 (87.77.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:41:18.743447 2026] [security2:error] [pid 22304:tid 22357] [client 34.88.77.87:38686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "telecomdetectives.com.jameskeeton.com"] [uri "/.git/config"] [unique_id "avZ4zkyV7VVth1qA3sO2HAAAAZU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
