🇿🇦
conure.sh
2026-08-29 12:01:39
(2 days ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s
Web App Attack
🇧🇾
lns.bz
2026-08-28 21:38:28
(3 days ago)
Too many 404 requests [BY]
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-08-28 21:22:12
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇫🇷
dynamix
2026-08-28 18:06:09
(3 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 17:01:33
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.96.15 (15.96.151.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.96.15 (15.96.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:01:26.352495 2026] [security2:error] [pid 12053:tid 12053] [client 34.151.96.15:57954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solutionsint.com.crestrong.com"] [uri "/html/.git/config"] [unique_id "apG-5jSOmvaH57aP7m7bSwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-08-28 16:09:26
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
0x44
2026-08-28 13:56:11
(3 days ago)
TCP SYN Discovery - Flooding
DDoS Attack
🇺🇸
TPI-Abuse
2026-08-28 13:26:50
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.96.15 (15.96.151.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.96.15 (15.96.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:26:43.537569 2026] [security2:error] [pid 8092:tid 8092] [client 34.151.96.15:59030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.launderpet.wagsgrooming.com"] [uri "/backend/.git/config"] [unique_id "apGMk4ItB8gGJU-e9YJM0gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 12:46:21
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.96.15 (15.96.151.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.96.15 (15.96.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 08:46:14.103395 2026] [security2:error] [pid 4147:tid 4147] [client 34.151.96.15:38768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chapa.net"] [uri "/var/www/.git/config"] [unique_id "apGDFs139wNYXmd264WIfwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-28 12:41:18
(3 days ago)
Scenarios: http-probing, http-sensitive-files
Total requests: 12
Web App Attack
🇺🇸
mnsf
2026-08-28 00:05:30
(4 days ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇳🇱
Eric
2026-08-27 16:52:40
(4 days ago)
[Thu Aug 27 16:52:39.433281 2026] [security2:error] [pid 3546204:tid 3546204] [client 34.151.96.15:4 ...
show more
[Thu Aug 27 16:52:39.433281 2026] [security2:error] [pid 3546204:tid 3546204] [client 34.151.96.15:49758] [client 34.151.96.15] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "onderdelen.fambus.nl"] [uri "/app/.git/config"] [unique_id "apBrV9GBxsF7ANgSta165QAAAAM"]
[Thu Aug 27 16:52:39.445972 2026] [security2:error] [pid 3546202:tid 3546202] [client 34.151.96.15:49766] [client 34.151.96.15] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Sc
...
show less
Hacking
Web App Attack
2026-08-27 14:23:34
(4 days ago)
Scanner hitting /app/.git/config on n8p.osef.cloud (GOOGL-2) — aaguard
Brute-Force
Port Scan
🇺🇸
TPI-Abuse
2026-08-27 14:13:10
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.96.15 (15.96.151.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.96.15 (15.96.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 10:13:05.723883 2026] [security2:error] [pid 2278204:tid 2278224] [client 34.151.96.15:47936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.agrigrailtechnologies.com"] [uri "/backend/.git/config"] [unique_id "apBF8ZTTt_PFTEZE2Nos9AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-08-27 13:40:08
(4 days ago)
Multiple WAF Violations
Web App Attack