๐จ๐ฆ
lakered
2026-06-09 22:29:28
(1 week ago)
Detectors: [CROWDSEC] | Reasons: CrowdSec: Reconnaissance scan | Tech Evidence: JA4H: 4f9228cd43b6fc ...
show more
Detectors: [CROWDSEC] | Reasons: CrowdSec: Reconnaissance scan | Tech Evidence: JA4H: 4f9228cd43b6fc61dd53816d23304059, Minimal-Browser-Profile, Lazy-Header-Accept, Fake-Chrome-Desktop (No-CH), JA4: t13d1315h2 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36
show less
Port Scan
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 21:59:21
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐ซ๐ท
masterguru
2026-06-09 14:51:36
(1 week ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-06-08 22:02:54
(1 week ago)
Auto-ban: >3000 req/min op 2026-06-08
Web App Attack
SSH
Hacking
๐ฎ๐ฉ
Burayot
2026-06-08 15:48:09
(1 week ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.135.253.217 (US/United States/21 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.135.253.217 (US/United States/217.253.135.34.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
๐ซ๐ท
Thaliruth
2026-06-08 14:33:48
(1 week ago)
[08/Jun/2026:16:33:47.637108 +0200] aibSy6QHJ5ue2D2UpjO3FAAAAIM 34.135.253.217 60322 127.0.0.1 7081
...
show more
[08/Jun/2026:16:33:47.637108 +0200] aibSy6QHJ5ue2D2UpjO3FAAAAIM 34.135.253.217 60322 127.0.0.1 7081
...
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-08 13:13:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 09:13:34.985544 2026] [security2:error] [pid 31636:tid 31646] [client 34.135.253.217:48034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bacchus.productions"] [uri "/.git/config"] [unique_id "aia__tVYZRxUjncYZkJVFAAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 11:37:25
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 07:37:19.634868 2026] [security2:error] [pid 5076:tid 5076] [client 34.135.253.217:51224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "monaroi.com"] [uri "/.git/config"] [unique_id "aiapb1KTUITPEBiAl3JmeQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 10:54:55
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 06:54:48.989654 2026] [security2:error] [pid 4951:tid 4951] [client 34.135.253.217:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.eddysgroup.com"] [uri "/.git/config"] [unique_id "aiafeIgLAygrm1mRH36yRwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 09:42:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 05:42:27.796134 2026] [security2:error] [pid 19645:tid 19645] [client 34.135.253.217:60414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blog.lovebuilds.com"] [uri "/.git/config"] [unique_id "aiaOg5KuhUPkGralcOc3tgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
wlt-blocker
2026-06-08 06:27:28
(1 week ago)
Unauthorized access to webpage admin
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 06:23:22
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 02:23:17.905539 2026] [security2:error] [pid 25039:tid 25039] [client 34.135.253.217:45774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "femalestripperslaquinta.com"] [uri "/.git/config"] [unique_id "aiZf1cuXraSH4r0fPE50cwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 05:43:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 01:43:50.291801 2026] [security2:error] [pid 2257:tid 2267] [client 34.135.253.217:44872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.icert.io"] [uri "/.git/config"] [unique_id "aiZWlloeZZk4-Hnp5gxNOQAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 03:12:06
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.135.253.217 (217.253.135.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 23:12:01.046162 2026] [security2:error] [pid 20126:tid 20126] [client 34.135.253.217:40178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flutepraise.com"] [uri "/.git/config"] [unique_id "aiYzAZFRsFE5mI2i_PEt5AAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-08 02:50:01
(1 week ago)
suspicious request in access.log
Web App Attack