๐ง๐ช
cmbplf
2026-10-23 23:27:21
(2 hours ago)
4.042 requests with url.path *.env
120 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-23 22:33:23
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.131.201.24 (24.201.131.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.131.201.24 (24.201.131.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 18:33:16.819072 2026] [security2:error] [pid 26345:tid 26345] [client 34.131.201.24:38710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aandbnaturalfoods.com"] [uri "/.git/config"] [unique_id "atvgrCxBXGnJycxRvsgSZAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 21:36:40
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.131.201.24 (24.201.131.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.131.201.24 (24.201.131.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:36:36.311699 2026] [security2:error] [pid 25026:tid 25026] [client 34.131.201.24:57252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aam-artists.com"] [uri "/.git/config"] [unique_id "atvTZLaKfCx71CHVYYGIkwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-23 21:06:06
(5 hours ago)
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.131.201.24 - - [23/Oct/2026:23:05:47 +0200] "GET /.git/config HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-23 20:51:04
(5 hours ago)
[topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34 ...
show more
[topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.131.201.24 - - \[23/Oct/2026:22:50:43 +0200\] "GET /.git/config HTTP/1.1" 307 362 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-23 19:38:46
(6 hours ago)
Excessive 404/403 errors
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-23 18:47:10
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.131.201.24 (24.201.131.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.131.201.24 (24.201.131.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:47:06.588491 2026] [security2:error] [pid 18341:tid 18374] [client 34.131.201.24:53306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aaenroll.com"] [uri "/.git/config"] [unique_id "aturqteLLRM_lUUxSWaz4AAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Stara
2026-10-23 18:27:04
(7 hours ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 17:29:23
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.131.201.24 (24.201.131.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.131.201.24 (24.201.131.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 13:29:19.341350 2026] [security2:error] [pid 30243:tid 30243] [client 34.131.201.24:38740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aacoustics.com"] [uri "/.git/config"] [unique_id "atuZb5SZvXodA8tKWOVnfAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-23 17:15:44
(8 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 13:48:37
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.131.201.24 (24.201.131.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.131.201.24 (24.201.131.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:48:33.451882 2026] [security2:error] [pid 12213:tid 12213] [client 34.131.201.24:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.luisgtechgroup.com"] [uri "/.git/config"] [unique_id "attlsRGLmuGeShLLVeqi9QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-23 12:25:08
(13 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-21 04:50:01
(2 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐บ๐ธ
WellSpring
2026-10-20 07:04:37
(3 days ago)
env leak on wellspr.ing/sparkpost/.env โ WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
Anonymous
2026-10-19 23:27:52
(4 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack