๐บ๐ธ
TPI-Abuse
2026-10-21 05:23:15
(4 seconds ago)
(mod_security) mod_security (id:210492) triggered by 34.150.99.251 (251.99.150.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.99.251 (251.99.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 01:23:09.755501 2026] [security2:error] [pid 24774:tid 24785] [client 34.150.99.251:51618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arrowsinthequiver.com"] [uri "/.git/config"] [unique_id "athMPUmukxw1YUs124hb8wAAAUg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-21 03:52:07
(1 hour ago)
[news.tmg.gr] httpd-config-scan: sites=arrhythmiasinstitute.gr; logs=/var/log/httpd/domains/arrhythm ...
show more
[news.tmg.gr] httpd-config-scan: sites=arrhythmiasinstitute.gr; logs=/var/log/httpd/domains/arrhythmiasinstitute.gr.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-10-21 03:30:58
(1 hour ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-21 02:54:03
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.150.99.251 (251.99.150.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.99.251 (251.99.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 22:53:58.349595 2026] [security2:error] [pid 3843:tid 3843] [client 34.150.99.251:43574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arrasmithquill.com"] [uri "/.git/config"] [unique_id "atgpRjTMhNpm05kWf_u39AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
webanyone
2026-10-21 02:38:23
(2 hours ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10 ...
show more
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
Anonymous
2026-10-21 01:55:03
(3 hours ago)
suspicious request in access.log
Web App Attack
๐ซ๐ฎ
YF
2026-10-21 01:30:42
(3 hours ago)
404 errors Vulnerability scan
Web App Attack
Anonymous
2026-10-21 01:24:31
(3 hours ago)
Banned by Fail2Ban on server
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-21 00:42:49
(4 hours ago)
Excessive multi-domain requests
Brute-Force
๐ท๐ด
clauss
2026-10-20 22:11:08
(7 hours ago)
34.150.99.251 - - [21/Oct/2026:01:11:07 +0300] "GET /phpinfo.php HTTP/2.0" 403 0 "-" "Mozilla/5.0 (W ...
show more
34.150.99.251 - - [21/Oct/2026:01:11:07 +0300] "GET /phpinfo.php HTTP/2.0" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.150.99.251 - - [21/Oct/2026:01:11:07 +0300] "GET /info.php HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 21:54:56
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.150.99.251 (251.99.150.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.99.251 (251.99.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 17:54:51.721423 2026] [security2:error] [pid 19263:tid 19263] [client 34.150.99.251:41648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aromatherapyricebags.com"] [uri "/.git/config"] [unique_id "atfjKxPZHD3BJlkquCjtQAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 20:39:38
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.150.99.251 (251.99.150.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.99.251 (251.99.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 16:39:34.040740 2026] [security2:error] [pid 31242:tid 31242] [client 34.150.99.251:45138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aroilcontrolsystem.com"] [uri "/.git/config"] [unique_id "atfRhv968m4RBofJ7Xj4hwAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 19:45:20
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.150.99.251 (251.99.150.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.99.251 (251.99.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 15:45:14.172915 2026] [security2:error] [pid 17679:tid 17679] [client 34.150.99.251:42064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arnoldwell.com"] [uri "/.git/config"] [unique_id "atfEyrFv5omf2V-0riPeQQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-20 19:32:19
(9 hours ago)
7.493 requests with url.path *.env
Brute-Force
Bad Web Bot
๐ฉ๐ช
arnisolutions
2026-10-20 18:58:37
(10 hours ago)
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production s ...
show more
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-10-20 and 2026-10-20 (UTC). Sample request: GET /.env.local HTTP/1.1
show less
Web App Attack
Hacking