๐ณ๐ฑ
thedreamer.nl
2026-10-17 09:41:43
(7 hours ago)
34.97.189.14 - - [17/Oct/2026:11:39:06 +0200] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Ma ...
show more
34.97.189.14 - - [17/Oct/2026:11:39:06 +0200] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "JP" "Osaka" "34.69300" "135.50050"
34.97.189.14 - - [17/Oct/2026:11:39:07 +0200] "GET /.env HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "JP" "Osaka" "34.69300" "135.50050"
34.97.189.14 - - [17/Oct/2026:11:39:08 +0200] "GET /.env.local HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "JP" "Osaka" "34.69300" "135.50050"
34.97.189.14 - - [17/Oct/2026:11:39:09 +0200] "GET /.env.production HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "JP" "Osaka" "34.69300" "135.50050"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
๐จ๐ญ Hosting
2026-10-17 05:10:36
(12 hours ago)
Automated WAF report: 200-300 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
๐ซ๐ท
โจ
2026-10-17 00:43:16
(16 hours ago)
Domain : appo11yon.com
Rule : config
2026-10-17 00:36:01 ***hidden-privacy***5 GET /.git/config - 44 ...
show more
Domain : appo11yon.com
Rule : config
2026-10-17 00:36:01 ***hidden-privacy***5 GET /.git/config - 443 - 34.97.189.14 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - www.appo11yon.com 404 8 0 1280 285 259 - -
show less
Hacking
SQL Injection
๐ฉ๐ช
LRob
2026-10-17 00:27:28
(17 hours ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebK ...
show more
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-10-17 00:16:26
(17 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐ฌ๐ง
consul.to
2026-10-16 22:26:11
(19 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-10-16 20:27:14
(21 hours ago)
Try to access /.git/config
Web App Attack
๐ณ๐ฑ
Mangelot Hosting
2026-10-16 15:06:42
(1 day ago)
(modsec_attack) srv104 ModSecurity attack 34.97.189.14 (JP/Japan/14.189.97.34.bc.googleusercontent.c ...
show more
(modsec_attack) srv104 ModSecurity attack 34.97.189.14 (JP/Japan/14.189.97.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐ณ๐ฑ
tmiland
2026-10-16 14:51:48
(1 day ago)
Detected 99 connections from 34.97.189.14 last 10 minutes.; lone high-rate source (combined 198 requ ...
show more
Detected 99 connections from 34.97.189.14 last 10 minutes.; lone high-rate source (combined 198 requests in both windows); Logs: 34.97.189.14 - - [16/Oct/2026:16:50:22 +0200] "GET / HTTP/1.1" 200 8295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.97.189.14 - - [16/Oct/2026:16:50:32 +0200] "POST / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.97.189.14 - - [16/Oct/2026:16:50:34 +0200] "GET /.git/config HTTP/1.1" 200 8298 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.97.189.14 - - [16/Oct/2026:16:50:34 +0200] "POST / HTTP/1.1" 200 8295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.97.189.14 - - [16/Oct/2026:16:50:35 +0200] "GET /.env HTTP/1.1" 200 8307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHT
show less
DDoS Attack
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 14:33:45
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.97.189.14 (14.189.97.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.189.14 (14.189.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:33:38.329251 2026] [security2:error] [pid 2950:tid 2950] [client 34.97.189.14:34532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.app.s1global.net.s1global.net"] [uri "/.git/config"] [unique_id "atI1wqbNpwwqc5KBWOHEDwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
iwle
2026-10-16 11:05:29
(1 day ago)
[Fri Oct 16 07:05:27.477179 2026] [:error] [pid 1586:tid 1737] [client 34.97.189.14:57620] [client 3 ...
show more
[Fri Oct 16 07:05:27.477179 2026] [:error] [pid 1586:tid 1737] [client 34.97.189.14:57620] [client 34.97.189.14] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.app.iwle.com"] [uri "/.git/config"] [unique_id "atIE9ySTNkUNGmukAXbMTwAAAEE"]
[Fri Oct 16 07:05:27.991399 2026] [:error] [pid 1586:tid 1739] [client 34.97.189.14:57620] [client 34.97.189.14] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"]
...
show less
Web App Attack
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-16 10:30:05
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.97.189.14 (14.189.97.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.189.14 (14.189.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:29:56.575244 2026] [security2:error] [pid 9582:tid 9582] [client 34.97.189.14:58214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.app.handyrehab.com"] [uri "/.git/config"] [unique_id "atH8pPYqbRfvXkpbWVRGSAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-10-16 04:46:25
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 04:16:41
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.97.189.14 (14.189.97.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.189.14 (14.189.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 00:16:36.909505 2026] [security2:error] [pid 22357:tid 22357] [client 34.97.189.14:40282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.apothecarydc.swampoodlegrounds.com"] [uri "/.git/config"] [unique_id "atGlJHPYq1U5M4POBrmD8QAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-16 03:00:07
(1 day ago)
Excessive multi-domain requests
Brute-Force