๐ฒ๐พ
Rizzy
2026-10-25 17:29:31
(1 minute ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-25 17:29:14
(1 minute ago)
(mod_security) mod_security (id:210492) triggered by 147.182.163.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 147.182.163.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 13:29:09.346632 2026] [security2:error] [pid 24554:tid 24554] [client 147.182.163.234:51906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.naturalunfinishedfurniture.com"] [uri "/specials/.git/config"] [unique_id "at48ZRYzvw4UsO6UNLiuhwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
IndigoRidge
2026-10-25 17:15:54
(15 minutes ago)
147.182.163.234 - - [25/Oct/2026:13:15:52 -0400] "GET /buyers/.git/config HTTP/1.1" 301 5795 "-" "Mo ...
show more
147.182.163.234 - - [25/Oct/2026:13:15:52 -0400] "GET /buyers/.git/config HTTP/1.1" 301 5795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
147.182.163.234 - - [25/Oct/2026:13:15:53 -0400] "GET /schools/.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0.1) Gecko/20100101 Firefox/4.0.1 Camino/2.2.1"
147.182.163.234 - - [25/Oct/2026:13:15:53 -0400] "GET /favorites/.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36 OPR/62.0.3331.119"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-25 17:12:41
(18 minutes ago)
(mod_security) mod_security (id:210492) triggered by 147.182.163.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 147.182.163.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 13:12:36.289409 2026] [security2:error] [pid 4064:tid 4064] [client 147.182.163.234:60876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nancyscafeandcatering.com"] [uri "/food/.git/config"] [unique_id "at44hD5HI2Mbx94ndvmKaQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
Masterpiece
2026-10-25 17:07:02
(24 minutes ago)
Web scanning (http-sensitive-files), 5 requests.
Web App Attack
Anonymous
2026-10-25 17:01:22
(29 minutes ago)
Web probing (2 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CR ...
show more
Web probing (2 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-25 16:55:40
(35 minutes ago)
(mod_security) mod_security (id:210492) triggered by 147.182.163.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 147.182.163.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:55:33.547637 2026] [security2:error] [pid 18888:tid 18888] [client 147.182.163.234:49932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.myclassicvw.com"] [uri "/profile/.git/config"] [unique_id "at40hZ9DPmNUHXUNjmMPIwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
backslash
2026-10-25 16:48:00
(43 minutes ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot
Anonymous
2026-10-25 16:47:53
(43 minutes ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฉ๐ช
Sรฉfora Srl
2026-10-25 16:46:30
(44 minutes ago)
crowdsecurity/http-sensitive-files detected by CrowdSec
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-25 16:44:56
(46 minutes ago)
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 147.182.163.234 - - [25/Oct/2026:17:44:55 +0100] "GET /perreaux/.git/config HTTP/2.0" 403 87 "-" "Mozilla/5.0 (Linux; Android 7.1.1; Z971) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-25 16:44:39
(46 minutes ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ฉ๐ช
Mr-Money
2026-10-25 16:42:52
(48 minutes ago)
scenario: crowdsecurity/http-sensitive-files - events: 5
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-25 16:40:18
(50 minutes ago)
(mod_security) mod_security (id:210492) triggered by 147.182.163.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 147.182.163.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:40:13.260644 2026] [security2:error] [pid 1375:tid 1375] [client 147.182.163.234:41008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.muslera.com"] [uri "/electrogas/.git/config"] [unique_id "at4w7ZIAKOQ5QiGt6ucNsAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-10-25 16:25:39
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking