๐บ๐ธ
TPI-Abuse
2026-10-17 09:12:31
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.152.60.247 (247.60.152.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.152.60.247 (247.60.152.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 05:12:22.974613 2026] [security2:error] [pid 9830:tid 9830] [client 34.152.60.247:54674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3pl.com"] [uri "/.git/config"] [unique_id "atM79gPHmXKE23SCfn7NygAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 09:40:42
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.152.60.247 (247.60.152.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.152.60.247 (247.60.152.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 05:40:36.490954 2026] [security2:error] [pid 26230:tid 26230] [client 34.152.60.247:39730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asiaan.net"] [uri "/.git/config"] [unique_id "atHxFEIyBwnFGVEv8KJkJgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฑ๐น
NotACaptcha
2026-10-16 08:07:54
(6 days ago)
webserver:443 [16/Oct/2026] "GET /scripts/.env HTTP/1.1" 404 463 "-" "Mozilla/5.0 (Windows NT 10.0; ...
show more
webserver:443 [16/Oct/2026] "GET /scripts/.env HTTP/1.1" 404 463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
webserver:443 [16/Oct/2026] "GET /dashboard/.env HTTP/1.1" 404 463 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
webserver:443 [16/Oct/2026] "GET /tools/.env HTTP/1.1" 404 463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
webserver:443 [16/Oct/2026] "GET /portal/.env HTTP/1.1" 404 463 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
webserver:443 [16/Oct/2026] "GET /internal/.env HTTP/1.1" 404 463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
webserver:443 [16/Oct/2026] "GET /local/.env HTTP/1.1" 404 463 "-" ...
show less
Web App Attack
Anonymous
2026-10-16 03:10:43
(1 week ago)
34.152.60.247 - - [16/Oct/2026:03:10:42 +0000] "GET /.git/config HTTP/1.1" 404 31935 "-" "Mozilla/5. ...
show more
34.152.60.247 - - [16/Oct/2026:03:10:42 +0000] "GET /.git/config HTTP/1.1" 404 31935 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-16 02:27:47
(1 week ago)
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.152.60.247 - - [16/Oct/2026:04:27:35 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-16 01:15:03
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Anonymous
2026-10-16 00:57:55
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-10-16 00:57:26
(1 week ago)
34.152.60.247 - - [16/Oct/2026:00:56:28 +0000] "POST / HTTP/1.1" 403 23961 "-" "Mozilla/5.0 (X11; Li ...
show more
34.152.60.247 - - [16/Oct/2026:00:56:28 +0000] "POST / HTTP/1.1" 403 23961 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.152.60.247"
34.152.60.247 - - [16/Oct/2026:00:56:28 +0000] "POST / HTTP/1.1" 403 23961 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.152.60.247"
34.152.60.247 - - [16/Oct/2026:00:56:30 +0000] "GET /.git/config HTTP/1.1" 403 23995 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.152.60.247"
34.152.60.247 - - [16/Oct/2026:00:56:33 +0000] "GET /.env HTTP/1.1" 403 23994 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.152.60.247"
34.152.60.247 - - [16/Oct/2026:00:56:34 +0000] "GET /.env.local HTTP/1.1" 403 23997 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Ge
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 00:54:43
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.152.60.247 (247.60.152.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.152.60.247 (247.60.152.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 20:54:35.593765 2026] [security2:error] [pid 5053:tid 5082] [client 34.152.60.247:46940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asetiadi.net"] [uri "/.git/config"] [unique_id "atF1ywLfqBHKDHNdkx5I0wAAAVg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-16 00:31:40
(1 week ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-10-16 00:11:24
(1 week ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 23:57:47
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.152.60.247 (247.60.152.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.152.60.247 (247.60.152.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 19:57:44.358114 2026] [security2:error] [pid 13612:tid 13612] [client 34.152.60.247:33340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asermaq.cl"] [uri "/.git/config"] [unique_id "atFoePgdqZwmGTxX5auGAgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
zynex
2026-10-15 23:22:37
(1 week ago)
URL Probing: /server/.env
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-15 23:20:01
(1 week ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 23:05:35
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 34.152.60.247 (247.60.152.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 34.152.60.247 (247.60.152.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 19:05:27.376798 2026] [security2:error] [pid 28919:tid 28919] [client 34.152.60.247:43566] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "asegreen.com"] [uri "/.git/config"] [unique_id "atFcN-yNingYzPVtJNrJ8AAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack