๐บ๐ธ
mnsf
2026-09-01 20:05:23
(1 hour ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
๐บ๐ธ
Gabriel Camargo
2026-09-01 20:03:08
(1 hour ago)
34.126.115.217 - - [01/Sep/2026:15:03:07 -0500] "GET /app/.git/config HTTP/1.1" 301 178 "-" "crusade ...
show more
34.126.115.217 - - [01/Sep/2026:15:03:07 -0500] "GET /app/.git/config HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
34.126.115.217 - - [01/Sep/2026:15:03:07 -0500] "GET /.git/config HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
34.126.115.217 - - [01/Sep/2026:15:03:07 -0500] "GET /src/.git/config HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
...
show less
Brute-Force
SSH
๐บ๐ธ
kosada.com
2026-09-01 19:40:29
(1 hour ago)
Repeated exploit attempts, for example: /var/www/.git/config /.git/config (HTTP/1.1 port 443)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 18:25:28
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.126.115.217 (217.115.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.115.217 (217.115.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 14:25:22.021253 2026] [security2:error] [pid 4893:tid 4893] [client 34.126.115.217:33140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jeanniemorrislaw.com"] [uri "/site/.git/config"] [unique_id "apcYkpfXmnC2mHHVR40OJAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-01 17:07:03
(4 hours ago)
Automated web scanner. Requested suspicious paths: /html/.git/config | /app/.git/config | /wordpress ...
show more
Automated web scanner. Requested suspicious paths: /html/.git/config | /app/.git/config | /wordpress/.git/config | /src/.git/config | /htdocs/.git/config | /.git/config | /api/.git/config | /site/.git/config | /public/.git/config | /backend/.git/config | /www/.git/config | /var/www/.git/config. UTC: 2026-09-01 16:11:49.
show less
Web App Attack
๐ท๐ด
iulianh
2026-09-01 12:13:35
(9 hours ago)
80,443
Brute-Force
SSH
๐ซ๐ท
dynamix
2026-09-01 09:55:18
(11 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 09:54:00
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.126.115.217 (217.115.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.115.217 (217.115.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:53:56.061370 2026] [security2:error] [pid 10969:tid 10969] [client 34.126.115.217:47280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.instagenii.com"] [uri "/backend/.git/config"] [unique_id "apagtNExd8T8AszCND4U1wAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
gws-hostmaster
2026-09-01 09:37:29
(11 hours ago)
ModSecurity OWASP CRS (Anomaly Score: 5): Restricted File Access Attempt;
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 09:20:23
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.126.115.217 (217.115.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.115.217 (217.115.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:20:20.075031 2026] [security2:error] [pid 226452:tid 226485] [client 34.126.115.217:54820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seips.org"] [uri "/wordpress/.git/config"] [unique_id "apaY1N8rDBwRmC-l-5gdSQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 05:52:16
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.126.115.217 (217.115.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.115.217 (217.115.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:52:08.605530 2026] [security2:error] [pid 20201:tid 20201] [client 34.126.115.217:43232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.tigerallenyim.com"] [uri "/var/www/.git/config"] [unique_id "apZoCIS37py_33JIb5BKbQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 05:25:22
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.126.115.217 (217.115.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.115.217 (217.115.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:25:16.869975 2026] [security2:error] [pid 12498:tid 12498] [client 34.126.115.217:60464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heartstonemanor.buffaloweddingdeejay.com"] [uri "/html/.git/config"] [unique_id "apZhvKb8rT2pzT6bvwVkMAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-09-01 04:18:04
(17 hours ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-08-31 21:00:04
(1 day ago)
| [Dangerous/Singapore] Aggressive IP 34.126.115.217 (~30 hits). Type: DoS Defender- Web server 400 ...
show more
| [Dangerous/Singapore] Aggressive IP 34.126.115.217 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
๐ณ๐ฑ
e.fierstra
2026-08-31 17:11:34
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack