🇦🇺
tekgnosis
2026-06-26 02:11:27
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-26 01:44:47
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.101.125.38 (38.125.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.125.38 (38.125.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:44:42.214209 2026] [security2:error] [pid 20989:tid 20989] [client 34.101.125.38:48840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.alrightletsgo.com"] [uri "/shop/.git/config"] [unique_id "aj3ZitYJWVMc5iCL_RW6jAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 01:25:40
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.101.125.38 (38.125.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.125.38 (38.125.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:25:33.407379 2026] [security2:error] [pid 22655:tid 22667] [client 34.101.125.38:52270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stoborough.org.aafm.us"] [uri "/symfony/.git/config"] [unique_id "aj3VDZSLJqSiyhUVgOJT5AAAAUU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 00:18:09
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.101.125.38 (38.125.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.125.38 (38.125.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 20:18:06.035303 2026] [security2:error] [pid 20704:tid 20704] [client 34.101.125.38:44538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.andrewweigel.name"] [uri "/.git/config"] [unique_id "aj3FPjUSV8aG3zk7kaxBbQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
Cloudkul Cloudkul
2026-06-25 23:14:06
(2 months ago)
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ...
show more
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
show less
Brute-Force
Web App Attack
🇺🇸
infra-monitor
2026-06-25 18:00:07
(2 months ago)
Automated ban via infra-monitor: suspicious-probe, mgmt-path-probe, crowdsecurity/http-probing, +1 m ...
show more
Automated ban via infra-monitor: suspicious-probe, mgmt-path-probe, crowdsecurity/http-probing, +1 more
show less
Port Scan
Web App Attack
🇺🇸
Moby
2026-06-25 17:35:26
(2 months ago)
34.101.125.38 - - [25/Jun/2026:12:35:24 -0500] "GET /src/.git/config HTTP/1.1" 404 984 "-" "Mozilla/ ...
show more
34.101.125.38 - - [25/Jun/2026:12:35:24 -0500] "GET /src/.git/config HTTP/1.1" 404 984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3835.0 Safari/537.36" "75.88.18.221" "75.88.18.221"
34.101.125.38 - - [25/Jun/2026:12:35:24 -0500] "GET /frontend/.git/config HTTP/1.1" 404 984 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "75.88.18.221" "75.88.18.221"
34.101.125.38 - - [25/Jun/2026:12:35:24 -0500] "GET /api/.git/config HTTP/1.1" 404 984 "-" "Mozilla/5.0 (iPad; CPU OS 12_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/76.0.3809.81 Mobile/15E148 Safari/605.1" "75.88.18.221" "75.88.18.221"
...
show less
Web App Attack
🇧🇾
lns.bz
2026-06-25 14:19:31
(2 months ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
kosada.com
2026-06-25 13:55:48
(2 months ago)
Web vulnerability probing (bogus request)
Web App Attack
🇳🇱
Savvii
2026-06-25 13:11:01
(2 months ago)
20 attempts against mh-misbehave-ban on staging
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
clamehost.it
2026-06-25 12:17:06
(2 months ago)
Automatic report - Brute Force attack using this IP address
Brute-Force
2026-06-25 11:32:16
(2 months ago)
[ssd5.kdns.gr] httpd-suspicious-path: sites=global; logs=/var/log/httpd/access_log; samples=/.git/co ...
show more
[ssd5.kdns.gr] httpd-suspicious-path: sites=global; logs=/var/log/httpd/access_log; samples=/.git/config | /app/.git/config | /src/.git/config
show less
Hacking
Web App Attack