๐ณ๐ฑ
e.fierstra
2026-08-28 20:23:06
(7 minutes ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-08-28 13:16:57
(7 hours ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 34.159.136.104 (DE/Germany/104.136.159.34.bc.g ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 34.159.136.104 (DE/Germany/104.136.159.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
๐บ๐ธ
kosada.com
2026-08-28 00:14:59
(20 hours ago)
Web vulnerability probing (bogus request)
Web App Attack
Anonymous
2026-08-28 00:06:38
(20 hours ago)
Web Server Enforcement Violation.
Hacking
๐ง๐ช
sid3windr
2026-08-27 22:55:27
(21 hours ago)
GET /.git/config (Tarpitted for 4m20s, wasted 15.35kB)
Web App Attack
๐ซ๐ท
dynamix
2026-08-27 18:09:46
(1 day ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
debestelapp
2026-08-27 17:05:08
(1 day ago)
Web App Attack
Anonymous
2026-08-27 15:46:18
(1 day ago)
34.159.136.104 - - [27/Aug/2026:17:46:17 +0200] "GET /src/.git/config HTTP/1.1" 403 12583 "-" "crusa ...
show more
34.159.136.104 - - [27/Aug/2026:17:46:17 +0200] "GET /src/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.159.136.104 - - [27/Aug/2026:17:46:17 +0200] "GET /app/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.159.136.104 - - [27/Aug/2026:17:46:17 +0200] "GET /html/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.159.136.104 - - [27/Aug/2026:17:46:17 +0200] "GET /var/www/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.159.136.104 - - [27/Aug/2026:17:46:17 +0200] "GET /api/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.159.136.104 - - [27/Aug/2026:17:46:17 +0200] "GET /www/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.159.136.104 - - [27/Aug/2026:17:46:17 +0200] "GET /site/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.159.136.104 - - [27/Aug/2026:17:46:17 +0200] "GET /public/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.159.136.104 - - [27/Aug/2026:17:46:17 +0200] "GET /wordpress
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 12:16:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.159.136.104 (104.136.159.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.136.104 (104.136.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 08:16:13.805569 2026] [security2:error] [pid 1850:tid 1850] [client 34.159.136.104:50776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wiki.juncurryahn.com"] [uri "/api/.git/config"] [unique_id "apAqjdafSidREnjvutKsKAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 09:57:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.159.136.104 (104.136.159.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.136.104 (104.136.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 05:57:28.972776 2026] [security2:error] [pid 27290:tid 27290] [client 34.159.136.104:37384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konahawaiirealty.com"] [uri "/src/.git/config"] [unique_id "apAKCIDzr6MVyQ1v6ACOogAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-08-27 09:45:02
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-08-27 09:21:34
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ฎ๐น
CoreTech srl
2026-08-27 07:34:00
(1 day ago)
cloudlinux2 fail2ban: 2026-08-27 09:29:13,176 fail2ban.actions [1775]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-08-27 09:29:13,176 fail2ban.actions [1775]: NOTICE [plesk-modsecurity] Unban 183.82.126.62cloudlinux2 fail2ban: 2026-08-27 09:29:28,253 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 3.250.96.178 - 2026-08-27 09:29:28cloudlinux2 fail2ban: 2026-08-27 09:29:32,582 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 3.250.96.178 - 2026-08-27 09:29:32cloudlinux2 fail2ban: 2026-08-27 09:30:40,852 fail2ban.filter [1775]: INFO [plesk-wordpress] Found 146.19.90.233 - 2026-08-27 09:30:40cloudlinux2 fail2ban: 2026-08-27 09:30:59,329 fail2ban.actions [1775]: NOTICE [plesk-modsecurity] Unban 34.40.27.8cloudlinux2 fail2ban: 2026-08-27 09:31:14,636 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 34.159.136.104 - 2026-08-27 09:31:14cloudlinux2 fail2ban: 2026-08-27 09:31:14,644 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 34.159.136.104 - 2026-08-27 09:31:14cloudlinux2 fail2ban: 2026-08-27 09:31:14,65
show less
Web App Attack
Anonymous
2026-08-27 03:53:27
(1 day ago)
34.159.136.104 - - [27/Aug/2026:05:53:20 +0200] "GET /site/.git/config HTTP/1.1" 403 146 "-" "crusad ...
show more
34.159.136.104 - - [27/Aug/2026:05:53:20 +0200] "GET /site/.git/config HTTP/1.1" 403 146 "-" "crusader-worker/1.0"
34.159.136.104 - - [27/Aug/2026:05:53:20 +0200] "GET /backend/.git/config HTTP/1.1" 403 146 "-" "crusader-worker/1.0"
34.159.136.104 - - [27/Aug/2026:05:53:20 +0200] "GET /www/.git/config HTTP/1.1" 403 146 "-" "crusader-worker/1.0"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 02:14:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.159.136.104 (104.136.159.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.136.104 (104.136.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 22:13:56.874017 2026] [security2:error] [pid 16464:tid 16464] [client 34.159.136.104:60530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jamelrobinson.com"] [uri "/www/.git/config"] [unique_id "ao-dZEk0-kEfpSYCSBj6AwAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack