|
๐ง๐ท
radardatelecom
|
|
Blocked by Radar da Telecom firewall โ abuseipdb
|
Bad Web Bot
Web App Attack
|
|
๐ณ๐ฑ
homeshowdomain.nl
|
|
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-23.
|
Web App Attack
SSH
Hacking
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.97.205.107 (107.205.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 03:12:09.935257 2026] [security2:error] [pid 21043:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.205.107 (107.205.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 03:12:09.935257 2026] [security2:error] [pid 21043:tid 21043] [client 34.97.205.107:41418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danzantesdehuesca.com.disnet-m.com"] [uri "/public/.git/config"] [unique_id "arTNScIH-tGwOTGEM4D3ngAAACU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.97.205.107 (107.205.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:37:35.753384 2026] [security2:error] [pid 7450:tid 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.205.107 (107.205.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:37:35.753384 2026] [security2:error] [pid 7450:tid 7450] [client 34.97.205.107:35478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "criticalmassofficial.com"] [uri "/wordpress/.git/config"] [unique_id "arSpD_wvBQ6JFMKPlr5dfgAAABY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host
|
|
๐ฌ๐ง
Aetherweb Ark
|
|
(mod_security) mod_security (id:949110) triggered by 34.97.205.107 (JP/Japan/107.205.97.34.bc.googleusercontent.com): N in the last X secs
|
Web App Attack
|
|
๐ง๐ช
cmbplf
|
|
763 requests with url.path */.git/config
|
Brute-Force
Bad Web Bot
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.97.205.107 (107.205.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 18:15:37.827816 2026] [security2:error] [pid 21990:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.205.107 (107.205.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 18:15:37.827816 2026] [security2:error] [pid 21990:tid 21990] [client 34.97.205.107:45426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coiltechnologies.com.controlledautomationinc.com"] [uri "/html/.git/config"] [unique_id "arRPiU0itRfIeetjKCAAOAAAAA0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐ณ๐ฑ
nate naten
|
|
HoneyTrap: git_config attempt on /.git/config from Japan
|
Bad Web Bot
Web App Attack
|
|
๐ณ๐ฑ
Alt255
|
|
[ti-07al] Web exploit scanning: 10 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.97.205.107 - - [23/Sep/2026:19:08:26 +0200] "GET /wordpress/.git/config HTTP/1.1" 403 5787 "-" "crusader-worker/1.0"
...
|
Bad Web Bot
Web App Attack
|
|
๐ณ๐ฑ
WeCloudit-Anti-Abuse
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Web App Attack
Hacking
|
|
๐ณ๐ฑ
e.fierstra
|
|
ModSecurity hits exceeded
|
Bad Web Bot
Web App Attack
|
|
๐ช๐ธ
robotstxt
|
|
34.97.205.107 - - [23/Sep/2026:13:05:02 +0000] "GET /app/.git/config HTTP/1.1" 403 185762 "-" "crusader-worker/1.0" "-" edge="34.97.205.107"
34.97.205.107 - - [23/Sep/2026:13:05:02 +0000] "GET /src/.git/config HTTP/1.1" 403 163617 "-" "crusader-worke ...
show more
34.97.205.107 - - [23/Sep/2026:13:05:02 +0000] "GET /app/.git/config HTTP/1.1" 403 185762 "-" "crusader-worker/1.0" "-" edge="34.97.205.107"
34.97.205.107 - - [23/Sep/2026:13:05:02 +0000] "GET /src/.git/config HTTP/1.1" 403 163617 "-" "crusader-worker/1.0" "-" edge="34.97.205.107"
34.97.205.107 - - [23/Sep/2026:13:05:02 +0000] "GET /.git/config HTTP/1.1" 403 163848 "-" "crusader-worker/1.0" "-" edge="34.97.205.107"
34.97.205.107 - - [23/Sep/2026:13:05:02 +0000] "GET /backend/.git/config HTTP/1.1" 403 185754 "-" "crusader-worker/1.0" "-" edge="34.97.205.107"
34.97.205.107 - - [23/Sep/2026:13:05:02 +0000] "GET /api/.git/config HTTP/1.1" 403 185759 "-" "crusader-worker/1.0" "-" edge="34.97.205.107"
...
show less
|
Web App Attack
|
|
Anonymous
|
|
suspicious request in access.log
|
Web App Attack
|
|
๐ฎ๐ช
thecivvie
|
|
foomuuri firewall banned tcp/443 10 attempts
|
Brute-Force
|