๐ซ๐ท
masterguru
2026-10-20 15:44:48
(32 minutes ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-10-20 14:59:47
(1 hour ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐ฉ๐ช
LRob
2026-10-20 14:12:23
(2 hours ago)
Secret file probe | method: GET | path: /.git/config, /.env | ua: Mozilla/5.0 (Macintosh; Intel Mac ...
show more
Secret file probe | method: GET | path: /.git/config, /.env | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 12:44:54
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.151.103.25 (25.103.151.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.103.25 (25.103.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 08:44:50.863482 2026] [security2:error] [pid 25665:tid 25665] [client 34.151.103.25:57612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artbycorinnedodge.com"] [uri "/.git/config"] [unique_id "atdiQucujsslpkCIh_ICaAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 12:27:43
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.151.103.25 (25.103.151.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.103.25 (25.103.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 08:27:37.903750 2026] [security2:error] [pid 5169:tid 5189] [client 34.151.103.25:41838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artbox.cibernetic.com"] [uri "/.git/config"] [unique_id "atdeOea63CntTeYnoD7NPwAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 11:46:56
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.151.103.25 (25.103.151.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.103.25 (25.103.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 07:46:51.939793 2026] [security2:error] [pid 23082:tid 23082] [client 34.151.103.25:41206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artaria.us"] [uri "/.git/config"] [unique_id "atdUqzm5o4S2rR3ZWk8bfwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-20 11:00:04
(5 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-10-20 10:30:26
(5 hours ago)
[ns31.kdns.gr] httpd-config-scan: sites=art25.gr; logs=/var/log/httpd/domains/art25.gr.log; samples= ...
show more
[ns31.kdns.gr] httpd-config-scan: sites=art25.gr; logs=/var/log/httpd/domains/art25.gr.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
Anonymous
2026-10-20 10:00:34
(6 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 09:57:21
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.151.103.25 (25.103.151.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.103.25 (25.103.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 05:57:17.002004 2026] [security2:error] [pid 6255:tid 6255] [client 34.151.103.25:55418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "art.mavikalem.org"] [uri "/.git/config"] [unique_id "atc6_fJ2OnmGxUiIBgvThAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Nightreaver
2026-10-20 09:47:36
(6 hours ago)
34.151.103.25 - - [20/Oct/2026:11:47:34 0200] "GET /.env.production HTTP/1.1" 404 567 "-" "Mozilla/ ...
show more
34.151.103.25 - - [20/Oct/2026:11:47:34 0200] "GET /.env.production HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.103.25 - - [20/Oct/2026:11:47:35 0200] "GET /.env.staging HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.103.25 - - [20/Oct/2026:11:47:35 0200] "GET /.env.development HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.103.25 - - [20/Oct/2026:11:47:35 0200] "GET /.env.test HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.103.25 - - [20/Oct/2026:11:47:36 0200] "GET /.env.remote HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"[...]
show less
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-20 09:40:03
(6 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 09:37:09
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.151.103.25 (25.103.151.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.103.25 (25.103.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 05:37:05.089256 2026] [security2:error] [pid 15144:tid 15144] [client 34.151.103.25:45408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "art.drjaymissdiana.com"] [uri "/.git/config"] [unique_id "atc2QfdZXwzNQH_sP-x1IQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-20 07:11:34
(9 hours ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-10-20 06:40:06
(9 hours ago)
| [Dangerous/Australia] Aggressive IP 34.151.103.25 (~30 hits). Type: DoS Defender- Web server 400 e ...
show more
| [Dangerous/Australia] Aggressive IP 34.151.103.25 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection