๐ฟ๐ฆ
conure.sh
2026-09-11 12:08:51
(4 hours ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 2 domain(s) in 0s
Web App Attack
๐บ๐ธ
Rocky Mountain Bioengineering Symposium
2026-09-10 17:43:58
(22 hours ago)
34.124.213.66 - - [10/Sep/2026:11:43:57 -0600] "GET /.git/config HTTP/1.1" 300 7870 "-" "-"
...
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-10 16:57:24
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.124.213.66 (66.213.124.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.124.213.66 (66.213.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 12:57:19.998322 2026] [security2:error] [pid 25673:tid 25673] [client 34.124.213.66:34472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "board.csems.org"] [uri "/.git/config"] [unique_id "aqLhb4rx4rwqsqXl2sB9tQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-09-10 15:50:14
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
Anonymous
2026-09-10 15:33:37
(1 day ago)
Fail2Ban triggered
Web App Attack
๐ณ๐ฑ
JaRoNL
2026-09-10 15:29:19
(1 day ago)
34.124.213.66 - - [10/Sep/2026:17:29:18 +0200] "GET /.git/config HTTP/1.1" 404 7426 "-" "-"
...
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-10 15:27:16
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.124.213.66 (66.213.124.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.124.213.66 (66.213.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 11:27:12.027230 2026] [security2:error] [pid 22952:tid 22952] [client 34.124.213.66:44954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bnaiisraelkearny.royal-barbershop.com"] [uri "/.git/config"] [unique_id "aqLMUEHdb446DaU3AqwyKgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-10 15:18:37
(1 day ago)
[ssd5.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.git/config
Hacking
Web App Attack
Anonymous
2026-09-10 15:15:02
(1 day ago)
suspicious request in access.log
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-10 15:13:57
(1 day ago)
cloudlinux2 fail2ban: 2026-09-10 17:08:52,145 fail2ban.filter [1892]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-09-10 17:08:52,145 fail2ban.filter [1892]: INFO [plesk-wordpress] Found 104.234.19.19 - 2026-09-10 17:08:50cloudlinux2 fail2ban: 2026-09-10 17:09:07,816 fail2ban.filter [1892]: INFO [plesk-wordpress] Found 173.239.211.96 - 2026-09-10 17:09:07cloudlinux2 fail2ban: 2026-09-10 17:09:21,720 fail2ban.filter [1892]: INFO [plesk-modsecurity] Found 34.124.213.66 - 2026-09-10 17:09:21cloudlinux2 fail2ban: 2026-09-10 17:09:34,284 fail2ban.filter [1892]: INFO [plesk-modsecurity] Found 34.97.158.159 - 2026-09-10 17:09:34cloudlinux2 fail2ban: 2026-09-10 17:09:32,987 fail2ban.filter [1892]: INFO [plesk-modsecurity] Found 34.97.158.159 - 2026-09-10 17:09:32cloudlinux2 fail2ban: 2026-09-10 17:09:34,351 fail2ban.actions [1892]: NOTICE [plesk-modsecurity] Ban 34.97.158.159cloudlinux2 fail2ban: 2026-09-10 17:09:33,700 fail2ban.filter [1892]: INFO [plesk-modsecurity] Found 34.97.158.159 - 2026-09-10 17:09:33cloudlinux2 fail2ban:
show less
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-09-10 15:08:53
(1 day ago)
[10/Sep/2026:18:08:53 +0300] -- 34.124.213.66 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git ...
show more
[10/Sep/2026:18:08:53 +0300] -- 34.124.213.66 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-10 15:03:24
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.124.213.66 (66.213.124.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.124.213.66 (66.213.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 11:03:16.993747 2026] [security2:error] [pid 7989:tid 7989] [client 34.124.213.66:53142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bmillernotary.com"] [uri "/.git/config"] [unique_id "aqLGtGkV8EzFit0CtGIoNgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
Burayot
2026-09-10 15:01:14
(1 day ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.124.213.66 (SG/Singapore/66.213. ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.124.213.66 (SG/Singapore/66.213.124.34.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
๐ฉ๐ช
Blexyel
2026-09-10 14:51:24
(1 day ago)
34.124.213.66 - - [10/Sep/2026:16:51:23 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "-" "pingusmc ...
show more
34.124.213.66 - - [10/Sep/2026:16:51:23 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "-" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-10 14:48:05
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.124.213.66 (66.213.124.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.124.213.66 (66.213.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 10:47:57.169266 2026] [security2:error] [pid 336:tid 368] [client 34.124.213.66:53536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blurmypic.com"] [uri "/.git/config"] [unique_id "aqLDHaEca1TVvSScyKovuwAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack