🇲🇽
softed
2026-06-19 03:00:48
UTC ·
(4 months ago)
Web application attack detected by ModSecurity WAF on Apache HTTPD. Multiple rule violations triggered (SQL injection, XSS, path traversal, web scanner activity). Events detected: 29.
Web App Attack
Port Scan
2026-06-18 09:08:29
UTC ·
(4 months ago)
Trying to access config files
Web App Attack
2026-06-16 13:08:03
UTC ·
(4 months ago)
Trying to access config files
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-15 21:59:41
UTC ·
(4 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-15 09:39:17
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.153.20.230 (230.20.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:39:13.368099 2026] [security2:error] [pid 9380:tid 9 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.20.230 (230.20.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:39:13.368099 2026] [security2:error] [pid 9380:tid 9380] [client 34.153.20.230:40652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bjennehall.thehallway.net"] [uri "/app/.git/config"] [unique_id "ai_IQXo2AdwHNm687YPEYgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-15 09:06:09
UTC ·
(5 months ago)
Trying to access config files
Web App Attack
2026-06-15 08:10:01
UTC ·
(5 months ago)
suspicious request in access.log
Web App Attack
🇳🇱
vaddilyin
2026-06-15 07:52:12
UTC ·
(5 months ago)
{"ClientAddr":"34.153.20.230:57422","ClientHost":"34.153.20.230","ClientPort":"57422","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":65091,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Ove ...
show more
{"ClientAddr":"34.153.20.230:57422","ClientHost":"34.153.20.230","ClientPort":"57422","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":65091,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":65091,"RequestAddr":"down.vdkln.com","RequestContentSize":0,"RequestCount":29085,"RequestHost":"down.vdkln.com","RequestMethod":"GET","RequestPath":"/app/.git/config","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-06-15T07:52:11.051293616Z","StartUTC":"2026-06-15T07:52:11.051293616Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-15T07:52:11Z"}
{"ClientAddr":"34.153.20.230:57510","ClientHost":"34.153.20.230","ClientPort":"57510","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":41750,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":
...
show less
Web App Attack
🇧🇪
cmbplf
2026-06-15 07:35:11
UTC ·
(5 months ago)
1.266 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-15 07:06:19
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.153.20.230 (230.20.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:06:15.488054 2026] [security2:error] [pid 16243:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.20.230 (230.20.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:06:15.488054 2026] [security2:error] [pid 16243:tid 16243] [client 34.153.20.230:40312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web142.dnchosting.com"] [uri "/frontend/.git/config"] [unique_id "ai-kZ1lvnLN7z86ARD-EIAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 06:39:35
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.153.20.230 (230.20.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:39:28.317080 2026] [security2:error] [pid 2027:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.20.230 (230.20.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:39:28.317080 2026] [security2:error] [pid 2027:tid 2027] [client 34.153.20.230:33378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.conservadordehualpen.cl.tecnoconce.com"] [uri "/src/.git/config"] [unique_id "ai-eIE9YH1lC7nxs5w8PgAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-15 06:37:49
UTC ·
(5 months ago)
(modsecurity) srv101 ModSecurity 34.153.20.230 (US/United States/230.20.153.34.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇨🇦
polycoda
2026-06-15 04:56:41
UTC ·
(5 months ago)
AutoBlock: ⚙️ Configuration File Access (Non Decay-Based)
Hacking
Web App Attack
🇬🇧
consul.to
2026-06-15 04:28:15
UTC ·
(5 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 04:06:08
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.153.20.230 (230.20.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:06:01.422988 2026] [security2:error] [pid 16508:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.20.230 (230.20.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:06:01.422988 2026] [security2:error] [pid 16508:tid 16508] [client 34.153.20.230:41022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "charlestownmarina.com"] [uri "/.git/config"] [unique_id "ai96KcY6K_p2lwEhmF7ZMwAAAHU"]
show less
Brute-Force
Bad Web Bot
Web App Attack