๐บ๐ธ
iwle
2026-10-16 16:46:10
(1 week ago)
[Fri Oct 16 12:46:08.752301 2026] [:error] [pid 1616:tid 1764] [client 34.154.141.23:0] [client 34.1 ...
show more
[Fri Oct 16 12:46:08.752301 2026] [:error] [pid 1616:tid 1764] [client 34.154.141.23:0] [client 34.154.141.23] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "autodiscover.iwle.com"] [uri "/.git/config"] [unique_id "atJU0HYY_09qquM31O5CbQAAAJg"]
[Fri Oct 16 12:46:09.075422 2026] [:error] [pid 1616:tid 1725] [client 34.154.141.23:0] [client 34.154.141.23] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"
...
show less
Web App Attack
Brute-Force
๐ญ๐ณ
unph
2026-10-16 15:55:43
(1 week ago)
Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-16 15:49:03
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.154.141.23 (23.141.154.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.141.23 (23.141.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:48:57.878453 2026] [security2:error] [pid 8557:tid 8557] [client 34.154.141.23:35162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.itimetable21.com"] [uri "/.git/config"] [unique_id "atJHafMA0TA_pB9swba1PgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-16 15:45:20
(1 week ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-16 15:26:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.154.141.23 (23.141.154.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.141.23 (23.141.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:26:50.426679 2026] [security2:error] [pid 29614:tid 29614] [client 34.154.141.23:41508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.isyourcompanysafe.com"] [uri "/.git/config"] [unique_id "atJCOhdzn129xAql1kDnIQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
0x44
2026-10-16 13:14:21
(1 week ago)
Abusive host detected - Attempt to access sensitive files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-16 10:48:20
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.154.141.23 (23.141.154.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.141.23 (23.141.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:48:17.060888 2026] [security2:error] [pid 20580:tid 20580] [client 34.154.141.23:42342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.informationdocuments.com"] [uri "/.git/config"] [unique_id "atIA8XzdZ-TRBCIAixbXOAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 10:07:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.154.141.23 (23.141.154.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.141.23 (23.141.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:07:24.789210 2026] [security2:error] [pid 27617:tid 27617] [client 34.154.141.23:39054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.indie100.com"] [uri "/.git/config"] [unique_id "atH3XDSJVdr-XLOnicc6AgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Rocky Mountain Bioengineering Symposium
2026-10-16 05:23:18
(1 week ago)
[Thu Oct 15 23:23:15.896252 2026] [authz_core:error] [pid 142137:tid 139745225049664] [client 34.154 ...
show more
[Thu Oct 15 23:23:15.896252 2026] [authz_core:error] [pid 142137:tid 139745225049664] [client 34.154.141.23:58932] AH01630: client denied by server configuration: /var/www/horde/.env.bak
[Thu Oct 15 23:23:18.056007 2026] [authz_core:error] [pid 142137:tid 139745141122624] [client 34.154.141.23:58932] AH01630: client denied by server configuration: /var/www/horde/.env.dist
[Thu Oct 15 23:23:18.175402 2026] [authz_core:error] [pid 142137:tid 139747647952448] [client 34.154.141.23:58932] AH01630: client denied by server configuration: /var/www/horde/.env.swp
...
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-16 03:35:54
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.154.141.23 (23.141.154.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.141.23 (23.141.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:35:48.763321 2026] [security2:error] [pid 22589:tid 22589] [client 34.154.141.23:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.hvacs-aircon.com"] [uri "/.git/config"] [unique_id "atGblC7kRBuVyOJ4goLrgAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 03:05:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.154.141.23 (23.141.154.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.141.23 (23.141.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:05:52.596725 2026] [security2:error] [pid 19662:tid 19683] [client 34.154.141.23:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.humanet.io"] [uri "/.git/config"] [unique_id "atGUkDk8E4ZLblk6Y7VdZgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-15 23:15:04
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ซ๐ท
HerrWolf
2026-10-15 18:30:04
(1 week ago)
CrowdSec Detection: crowdsecurity/http-admin-interface-probing
Web App Attack