๐จ๐ญ
TheCoon
2026-06-02 05:00:02
(2 weeks ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
๐ง๐ท
TM
2026-05-29 14:32:00
(2 weeks ago)
get /.git/config
Web App Attack
๐ง๐ท
SOC Blue Team
2026-05-28 21:25:46
(3 weeks ago)
IPs get by Hunting on SIEM
Phishing
Web Spam
Port Scan
Hacking
๐ง๐ท
diego
2026-05-28 00:55:20
(3 weeks ago)
[probe-44-49] 2026-05-28 00:39:20, Client: 34.107.29.134, Protocol: 6, Unauthorized activity to HTTP ...
show more
[probe-44-49] 2026-05-28 00:39:20, Client: 34.107.29.134, Protocol: 6, Unauthorized activity to HTTP: GET /.git/config
show less
Web App Attack
๐ฎ๐ช
AutosOnShow
2026-05-28 00:45:12
(3 weeks ago)
blocked for webapp attack | path requested: /.git/config | seen at 2026-05-28 00:44:09.796 |
Web App Attack
๐ซ๐ท
JPPO
2026-05-27 22:49:44
(3 weeks ago)
2 hits : Port 443 : GET /.git or /.git/HEAD, /.git/config ... /.DS_store
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-27 07:54:39
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.107.29.134 (134.29.107.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.107.29.134 (134.29.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 03:54:35.442307 2026] [security2:error] [pid 9948:tid 9948] [client 34.107.29.134:36278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.anxietyquest.com"] [uri "/.git/config"] [unique_id "ahajO0AYbTCqDSHehRNCEQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-05-27 07:24:45
(3 weeks ago)
Login credentials theft attempt
Hacking
๐บ๐ธ
TPI-Abuse
2026-05-27 07:08:48
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.107.29.134 (134.29.107.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.107.29.134 (134.29.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 03:08:41.913684 2026] [security2:error] [pid 6996:tid 7168] [client 34.107.29.134:46124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.agqo.org"] [uri "/.git/config"] [unique_id "ahaYecuFWTfpHQYmhsoUDAAAARY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mashamal
2026-05-27 07:01:10
(3 weeks ago)
Vulnerability Probe
...
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-27 06:32:55
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.107.29.134 (134.29.107.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.107.29.134 (134.29.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 02:32:52.478917 2026] [security2:error] [pid 30858:tid 30858] [client 34.107.29.134:52520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.startordoro.com"] [uri "/.git/config"] [unique_id "ahaQFIFpKGydmseb1WuICgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-27 05:46:30
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.107.29.134 (134.29.107.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.107.29.134 (134.29.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 01:46:26.959369 2026] [security2:error] [pid 24071:tid 24071] [client 34.107.29.134:39108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.cabwebs.com"] [uri "/.git/config"] [unique_id "ahaFMn-qiOxoMg7L5TNIdwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-27 04:50:56
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.107.29.134 (134.29.107.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.107.29.134 (134.29.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 00:50:52.154688 2026] [security2:error] [pid 11373:tid 11373] [client 34.107.29.134:55248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.styxwamworld.com"] [uri "/.git/config"] [unique_id "ahZ4LMzrV4R2hE542objYAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-05-27 04:50:02
(3 weeks ago)
suspicious request in access.log
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-27 04:28:57
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.107.29.134 (134.29.107.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.107.29.134 (134.29.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 00:28:49.516827 2026] [security2:error] [pid 5748:tid 5748] [client 34.107.29.134:55094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.huboon.com"] [uri "/.git/config"] [unique_id "ahZzAXT82JFzNPSojMOj1AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack