๐จ๐ญ
4server
2026-08-29 09:10:41
(2 weeks ago)
[SatAug2911:10:33.2333682026][security2:error][pid1235079:tid1235292][client34.148.180.67:0]ModSecur ...
show more
[SatAug2911:10:33.2333682026][security2:error][pid1235079:tid1235292][client34.148.180.67:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"endlesspoolsticino.ch.81-17-25-250.cpanel.site\"][uri\"/app/.git/config\"][unique_id\"apKiCVlFEZmiWI1juCJuFgAAAEE\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-29 07:22:59
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.148.180.67 (67.180.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.180.67 (67.180.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 03:22:51.631139 2026] [security2:error] [pid 14691:tid 14691] [client 34.148.180.67:58414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.pushthemarketing.com"] [uri "/htdocs/.git/config"] [unique_id "apKIy6YerdfUHsZE_G_BEwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-08-29 04:48:32
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
kkw
2026-08-29 03:14:15
(2 weeks ago)
[REDACTED] 34.148.180.67 - - [29/Aug/2026:05:14:14 +0200] "GET /public/.git/config HTTP/1.1" 302 463 ...
show more
[REDACTED] 34.148.180.67 - - [29/Aug/2026:05:14:14 +0200] "GET /public/.git/config HTTP/1.1" 302 4633 "-" "crusader-worker/1.0"
... (mode: searching http-sensitive-files)
show less
Bad Web Bot
SSH
๐บ๐ธ
mnsf
2026-08-29 02:05:07
(2 weeks ago)
Abuse Detected (7)
Brute-Force
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-08-29 01:17:55
(2 weeks ago)
(mod_security) mod_security (id:949110) triggered by 34.148.180.67 (US/United States/67.180.148.34.b ...
show more
(mod_security) mod_security (id:949110) triggered by 34.148.180.67 (US/United States/67.180.148.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 23:32:04
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.148.180.67 (67.180.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.180.67 (67.180.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 19:32:00.876143 2026] [security2:error] [pid 29807:tid 29910] [client 34.148.180.67:56620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adetnw.com"] [uri "/api/.git/config"] [unique_id "apIacFF6rbOZPGj_8El_qwAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 20:59:35
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.148.180.67 (67.180.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.180.67 (67.180.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 16:59:28.459231 2026] [security2:error] [pid 4327:tid 4327] [client 34.148.180.67:36278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bulmacasozlugu.lobibilisim.com"] [uri "/www/.git/config"] [unique_id "apH2sAq3rx-5w8sVtDulNgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 17:28:22
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.148.180.67 (67.180.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.180.67 (67.180.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:28:18.269148 2026] [security2:error] [pid 3356581:tid 3356679] [client 34.148.180.67:35072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "appraisalteam.net"] [uri "/wordpress/.git/config"] [unique_id "apHFMqbWDGue4xInVJOdHgAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
NihiliousMonk
2026-08-28 16:41:23
(2 weeks ago)
Fail2Ban report from jail npm-scanners
Bad Web Bot
Web App Attack
๐บ๐ธ
xxkodedxx
2026-08-28 15:32:10
(2 weeks ago)
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1ร honeypot-get, 23ร edge-block ...
show more
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1ร honeypot-get, 23ร edge-block in 10m window.
Origin: US / AS396982 Google LLC
Active: 15:31:37 UTC
Volume: 23 HTTP req, 1 honeypot probe(s)
Bait taken: /wordpress/.git/config
Status mix: 444ร23
UA: "crusader-worker/1.0"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
Anonymous
2026-08-28 15:22:10
(2 weeks ago)
[web.zebs.ch] httpd-config-scan: sites=www.zebs.edu.mt; logs=/var/log/httpd/domains/zebs.edu.mt.log; ...
show more
[web.zebs.ch] httpd-config-scan: sites=www.zebs.edu.mt; logs=/var/log/httpd/domains/zebs.edu.mt.log; samples=/wordpress/.git/config | /site/.git/config | /api/.git/config
show less
Hacking
Web App Attack
๐ฆ๐บ
A.i.D.A.N.N
2026-08-28 13:35:43
(2 weeks ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web application attack detected
Web App Attack
Anonymous
2026-08-28 12:20:02
(2 weeks ago)
suspicious request in access.log
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-08-28 11:45:48
(2 weeks ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack