Anonymous
2026-09-16 09:25:03
(2 days ago)
suspicious request in access.log
Web App Attack
๐จ๐ญ
Sonics
2026-09-16 08:46:30
(2 days ago)
Automated scanner: .env/.git/phpinfo scan
Web App Attack
Anonymous
2026-09-16 07:52:51
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-09-16 06:11:21
(2 days ago)
Try to access /.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 02:52:19
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.8.84 (84.8.118.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.8.84 (84.8.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:52:14.846201 2026] [security2:error] [pid 18145:tid 18145] [client 34.118.8.84:42488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thedavidbowers.com"] [uri "/.git/config"] [unique_id "aqoEXmZ-HdfZxUgYay5yjgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 02:07:21
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.8.84 (84.8.118.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.8.84 (84.8.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:07:14.191686 2026] [security2:error] [pid 20173:tid 20173] [client 34.118.8.84:56688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thebestac.com"] [uri "/.git/config"] [unique_id "aqn50vBjDrBRXdU5wKgiJAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 20:36:44
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.8.84 (84.8.118.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.8.84 (84.8.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:36:37.986342 2026] [security2:error] [pid 2485:tid 2485] [client 34.118.8.84:33914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sympalais.com"] [uri "/.git/config"] [unique_id "aqmsVeHUxczwxbJ9YZeargAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 18:40:49
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.8.84 (84.8.118.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.8.84 (84.8.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:40:45.278131 2026] [security2:error] [pid 28308:tid 28308] [client 34.118.8.84:39028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sunsettrailsardmore.com"] [uri "/.git/config"] [unique_id "aqmRLfJcfmjr-gobdA5fcwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 18:15:57
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.8.84 (84.8.118.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.8.84 (84.8.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:15:50.180780 2026] [security2:error] [pid 17631:tid 17631] [client 34.118.8.84:57372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.summitmediawv.com"] [uri "/.git/config"] [unique_id "aqmLVrmSG-ies_stgDo-UAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-15 08:39:18
(3 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐จ๐ญ
Origon
2026-09-15 08:37:29
(3 days ago)
http-sensitive-files - IP: 34.118.8.84 - time="2026-09-15T10:37:29+02:00" level=info msg="(555f66b4 ...
show more
http-sensitive-files - IP: 34.118.8.84 - time="2026-09-15T10:37:29+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.118.8.84 (PL/396982) : 4h ban on Ip 34.118.8.84" module=db
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 07:32:41
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.8.84 (84.8.118.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.8.84 (84.8.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 03:32:35.181200 2026] [security2:error] [pid 24803:tid 24803] [client 34.118.8.84:39768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "westernmassaa.net"] [uri "/.git/config"] [unique_id "aqj0k5YAGMcUYVVmMLwGngAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-15 07:07:07
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ธ
Rip
2026-09-15 04:17:56
(4 days ago)
Remote Command Execution - Unix Shell Expression Found in URI
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-15 03:00:04
(4 days ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack