2026-09-21 09:03:48
(1 day ago)
[da.kdns.gr] httpd-config-scan: sites=www.akraion.com; logs=/var/log/httpd/domains/akraion.com.log; ...
show more
[da.kdns.gr] httpd-config-scan: sites=www.akraion.com; logs=/var/log/httpd/domains/akraion.com.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 09:01:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.155.175.191 (191.175.155.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.175.191 (191.175.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 05:01:45.403323 2026] [security2:error] [pid 18152:tid 18152] [client 34.155.175.191:37420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.akramansari.mydobdate.net"] [uri "/.git/config"] [unique_id "arDyea2RlKPu_tuTV0KW0AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 08:23:39
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.155.175.191 (191.175.155.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.175.191 (191.175.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 04:23:35.358420 2026] [security2:error] [pid 1425:tid 1425] [client 34.155.175.191:56218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.akoy.com.dinogirl.com"] [uri "/.git/config"] [unique_id "arDphxAy7GEBMG-Se_2JqAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-21 06:09:45
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
chrisj
2026-09-21 05:48:57
(1 day ago)
[Mon Sep 21 05:48:57.354017 2026] [proxy_fcgi:error] [pid 107430:tid 107519] [client 34.155.175.191: ...
show more
[Mon Sep 21 05:48:57.354017 2026] [proxy_fcgi:error] [pid 107430:tid 107519] [client 34.155.175.191:52670] AH01071: Got error 'Primary script unknown'
[Mon Sep 21 05:48:57.454760 2026] [proxy_fcgi:error] [pid 107430:tid 107464] [client 34.155.175.191:52670] AH01071: Got error 'Primary script unknown'
[Mon Sep 21 05:48:57.587055 2026] [proxy_fcgi:error] [pid 107430:tid 107524] [client 34.155.175.191:52670] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇸🇪
vaia.cloud
2026-09-21 01:05:01
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-09-20 15:22:25
(2 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 12:01:03
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.155.175.191 (191.175.155.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.175.191 (191.175.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 08:00:56.188244 2026] [security2:error] [pid 6325:tid 6342] [client 34.155.175.191:40700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ajbruner.uoexpanse.com"] [uri "/.git/config"] [unique_id "aq_K-BwvDqUgQmCF74JHwAAAAM8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-20 08:48:08
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-20 08:03:04
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.155.175.191 (191.175.155.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.175.191 (191.175.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 04:03:00.129402 2026] [security2:error] [pid 29549:tid 29549] [client 34.155.175.191:43478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aivosminerals.soviaenterprises.com"] [uri "/.git/config"] [unique_id "aq-TNAVVS4_Kh8R0k1K3_QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-20 07:55:08
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
