[FriMay2218:04:33.6167642026][security2:error][pid1673504:tid1673508][client34.118.7.55:0]ModSecurit ...
show more[FriMay2218:04:33.6167642026][security2:error][pid1673504:tid1673508][client34.118.7.55:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"annunci-ticino.ch\"][uri\"/.git/config\"][unique_id\"ahB-kR-6bAA8BmJSh-gMWAAAAMI\"]
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.118.7.55 (PL/Poland/55.7.118.34.bc ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.118.7.55 (PL/Poland/55.7.118.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-193)
show less
Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probi ...
show moreAttempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing.
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.118.7.55 (PL/Poland/55.7.118.34.bc ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.118.7.55 (PL/Poland/55.7.118.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196)
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.118.7.55 (PL/Poland/55.7.118.34.bc ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.118.7.55 (PL/Poland/55.7.118.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-197)
show less
Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ...
show moreHoneypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud
show less
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ...
show moreHoneypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
Showing 1 to
15
of 15 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ