🇩🇪
Vegascosmetics
2025-05-23 21:51:33
UTC ·
(1 year ago)
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
🇬🇧
openstrike.co.uk
2025-05-23 05:12:40
UTC ·
(1 year ago)
2 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇺🇸
TPI-Abuse
2025-05-23 01:03:33
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.168.163.52 (52.163.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 22 21:03:30.368326 2025] [security2:error] [pid 2541602:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.168.163.52 (52.163.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 22 21:03:30.368326 2025] [security2:error] [pid 2541602:tid 2541602] [client 34.168.163.52:55180] [client 34.168.163.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lpass.net"] [uri "/.git/config"] [unique_id "aC_JYlDgpQ5m4cf59GEtQQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-23 00:31:59
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.168.163.52 (52.163.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 22 20:31:54.524999 2025] [security2:error] [pid 2240790:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.168.163.52 (52.163.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 22 20:31:54.524999 2025] [security2:error] [pid 2240790:tid 2240790] [client 34.168.163.52:59228] [client 34.168.163.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lovechicks.com"] [uri "/.git/config"] [unique_id "aC_B-rf2a6eqLOSCg_Sv8wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
SkyDancer
2025-05-23 00:10:17
UTC ·
(1 year ago)
Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-5
Hacking
Brute-Force
SSH
🇫🇷
All2gether
2025-05-22 23:57:27
UTC ·
(1 year ago)
Web App Attack
🇳🇱
Savvii
2025-05-22 23:41:52
UTC ·
(1 year ago)
27 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-22 23:21:18
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.168.163.52 (52.163.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 22 19:21:11.074405 2025] [security2:error] [pid 2900650:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.168.163.52 (52.163.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 22 19:21:11.074405 2025] [security2:error] [pid 2900650:tid 2900650] [client 34.168.163.52:55040] [client 34.168.163.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lonescouting.us"] [uri "/.git/config"] [unique_id "aC-xZ3i2vz0n8vwoWVYehQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-05-22 22:54:17
UTC ·
(1 year ago)
Web Attack Gitscanner Traffic Detected
Web App Attack
🇺🇸
TPI-Abuse
2025-05-22 22:49:18
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.168.163.52 (52.163.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 22 18:49:11.674705 2025] [security2:error] [pid 3182326:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.168.163.52 (52.163.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 22 18:49:11.674705 2025] [security2:error] [pid 3182326:tid 3182326] [client 34.168.163.52:40898] [client 34.168.163.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lognlumber.com"] [uri "/.git/config"] [unique_id "aC-p59SgQOIvU-s8vjQjMQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-05-22 21:50:33
UTC ·
(1 year ago)
Restricted File Access Requests
Hacking
Brute-Force
🇩🇪
Bedios GmbH
2025-05-22 21:12:28
UTC ·
(1 year ago)
Login credentials theft attempt
Hacking
🇺🇸
TPI-Abuse
2025-05-22 20:20:08
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.168.163.52 (52.163.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 22 16:20:03.634038 2025] [security2:error] [pid 4048723:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.168.163.52 (52.163.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 22 16:20:03.634038 2025] [security2:error] [pid 4048723:tid 4048723] [client 34.168.163.52:34036] [client 34.168.163.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plaisance.us"] [uri "/.git/config"] [unique_id "aC-G8xaqtTIH5Nbb47WGswAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2025-05-22 19:46:57
UTC ·
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.168.163.52 (US/United States/52.163.168.34.bc.googleusercontent.com): 1 in the last 3600 secs
Web App Attack
🇩🇪
piticu iuli
2025-05-22 19:42:11
UTC ·
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted] 34.168.163.52 (US/United States/52.163.168.34.bc.googleusercontent.com)
SQL Injection