๐ฉ๐ช
klaus_ph
2026-09-27 23:11:10
(1 day ago)
2026-09-27 00:16:05,983 fail2ban.actions [8144]: NOTICE [ipblocklist] Ban 34.95.128.224
...
Bad Web Bot
๐ง๐ท
Peregrine
2026-09-27 03:15:57
(1 day ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.95.128.224 104.23.254.72 - - [24/Sep/2026:05:30: ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.95.128.224 104.23.254.72 - - [24/Sep/2026:05:30:03 -0300] "GET /backend/.git/config HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ฉ๐ช
klaus_ph
2026-09-26 21:23:07
(2 days ago)
2026-09-25 20:58:00,190 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.95.128.224
.. ...
show more
2026-09-25 20:58:00,190 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.95.128.224
...
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-09-26 03:14:28
(2 days ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.95.128.224 104.23.254.72 - - [24/Sep/2026:05:30: ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.95.128.224 104.23.254.72 - - [24/Sep/2026:05:30:03 -0300] "GET /backend/.git/config HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-09-25 03:12:02
(3 days ago)
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 34.95.128.224 172.69.138.190 - - [24/Sep/2026:05:30:03 - ...
show more
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 34.95.128.224 172.69.138.190 - - [24/Sep/2026:05:30:03 -0300] "GET /var/www/.git/config HTTP/1.1" 404 18193
34.95.128.224 172.69.138.190 - - [24/Sep/2026:05:30:03 -0300] "GET /site/.git/config HTTP/1.1" 404 18193
34.95.128.224 172.69.138.190 - - [24/Sep/2026:05:30:03 -0300] "GET /api/.git/config HTTP/1.1" 404 18193
34.95.128.224 104.23.254.72 - - [24/Sep/2026:05:30:03 -0300] "GET /wordpress/.git/config HTTP/1.1" 404 18193
34.95.128.224 172.69.39.138 - - [24/Sep/2026:05:30:03 -0300] "GET /.git/config HTTP/1.1" 404 18193
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-25 02:00:32
(3 days ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
๐ง๐ท
radardatelecom
2026-09-24 22:25:43
(4 days ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-24 21:59:10
(4 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-23.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-24 09:12:29
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.95.128.224 (224.128.95.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.128.224 (224.128.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 05:12:23.055694 2026] [security2:error] [pid 8737:tid 8737] [client 34.95.128.224:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "demondomain.com"] [uri "/src/.git/config"] [unique_id "arTpd_MkGlni6I6g-PGFSgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
Peregrine
2026-09-24 08:30:09
(4 days ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.95.128.224 104.23.254.72 - - [24/Sep/2026:05:30: ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.95.128.224 104.23.254.72 - - [24/Sep/2026:05:30:03 -0300] "GET /backend/.git/config HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ซ๐ท
masterguru
2026-09-24 07:54:32
(4 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 07:14:05
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.95.128.224 (224.128.95.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.128.224 (224.128.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 03:13:59.460216 2026] [security2:error] [pid 9095:tid 9188] [client 34.95.128.224:45770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daraluz.net"] [uri "/src/.git/config"] [unique_id "arTNtxxkn4I0-vjaTDzkDwAAAdg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 05:51:08
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.95.128.224 (224.128.95.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.128.224 (224.128.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 01:51:03.759436 2026] [security2:error] [pid 3359:tid 3359] [client 34.95.128.224:54758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cydab.com"] [uri "/.git/config"] [unique_id "arS6R169bIcML6FNs8Hl5wAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-24 05:22:59
(4 days ago)
Scan for .git Files at 2026-09-24T05:22:59+00:00
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 04:57:25
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.95.128.224 (224.128.95.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.128.224 (224.128.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:57:22.100528 2026] [security2:error] [pid 17059:tid 17059] [client 34.95.128.224:55660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cromaki.com"] [uri "/api/.git/config"] [unique_id "arStspVr2rO9KnfRWTh6tgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack