🇿🇦
conure.sh
2026-09-04 03:51:39
(1 hour ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 1s
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 22:47:52
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:47:47.426601 2026] [security2:error] [pid 14097:tid 14097] [client 34.165.58.25:46742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.itimetable21.com"] [uri "/.git/config"] [unique_id "apn5E7c5ppC6xppfEOfm6gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 17:51:15
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 13:51:10.106730 2026] [security2:error] [pid 7116:tid 7116] [client 34.165.58.25:47754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.indie100.com"] [uri "/.git/config"] [unique_id "apmzjlYl1eg7FlyH73672AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 14:07:55
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 10:07:50.504544 2026] [security2:error] [pid 6055:tid 6055] [client 34.165.58.25:45472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.iconbizpromo.com"] [uri "/.git/config"] [unique_id "apl_NonACIBydL-sDoFJkgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 11:46:24
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 07:46:18.180945 2026] [security2:error] [pid 8449:tid 8467] [client 34.165.58.25:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.humanet.io"] [uri "/.git/config"] [unique_id "apleCqF5F0fB42Dymte4yAAAAI8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 08:38:41
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 04:38:36.534343 2026] [security2:error] [pid 18481:tid 18481] [client 34.165.58.25:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ndanetworks.com"] [uri "/.git/config"] [unique_id "apkyDHA6vByDhRuWsMqudgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇷
bubausluge
2026-09-03 06:28:12
(22 hours ago)
Blocked by https://aegis.hr — Web Scanner - (MITRE T1595.001), 624 attempts, Period: 2026-09-03T06:2 ...
show more
Blocked by https://aegis.hr — Web Scanner - (MITRE T1595.001), 624 attempts, Period: 2026-09-03T06:26:37 to 2026-09-03T06:26:47
show less
Port Scan
🇺🇸
TPI-Abuse
2026-09-02 21:41:04
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 17:40:59.230196 2026] [security2:error] [pid 1605051:tid 1605123] [client 34.165.58.25:58584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.mjkotob.com"] [uri "/.git/config"] [unique_id "apiX6xCrTDFTMG5vr0A7YwAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 21:09:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 17:09:04.734071 2026] [security2:error] [pid 19122:tid 19122] [client 34.165.58.25:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.grainavi.com"] [uri "/.git/config"] [unique_id "apiQcDezPlCswCA1gkrKpwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 19:19:04
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 15:18:57.128277 2026] [security2:error] [pid 20076:tid 20076] [client 34.165.58.25:41062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.microscopicpablo.com"] [uri "/.git/config"] [unique_id "aph2odMADjMOY-oYtrH9TgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-02 19:10:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
4server
2026-09-02 18:38:32
(1 day ago)
[WedSep0220:38:27.4691212026][security2:error][pid1808297:tid1808409][client34.165.58.25:0]ModSecuri ...
show more
[WedSep0220:38:27.4691212026][security2:error][pid1808297:tid1808409][client34.165.58.25:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcalendars.gmint.ch\"][uri\"/.env.bak\"][unique_id\"aphtI3YvccQJaSTqFtfFSAAAAY4\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 18:08:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 14:08:46.342515 2026] [security2:error] [pid 19916:tid 19916] [client 34.165.58.25:36774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.globalpackets.net"] [uri "/.git/config"] [unique_id "aphmLmwZSh-N16TViRfBdgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 17:35:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 13:34:58.637822 2026] [security2:error] [pid 29511:tid 29511] [client 34.165.58.25:58392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.glamorgirl.net"] [uri "/.git/config"] [unique_id "apheQpjM4lsbBqc_uFHXvAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 17:07:35
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.165.58.25 (25.58.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 13:07:30.260527 2026] [security2:error] [pid 695:tid 695] [client 34.165.58.25:44328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.meridianranchdrc.org"] [uri "/.git/config"] [unique_id "aphX0gWbUpMgL9Vemjz9tAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack