๐จ๐ญ
TheCoon
2026-05-29 19:45:02
(2 weeks ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
๐ฒ๐ฝ
octageeks.com
2026-05-28 04:07:25
(2 weeks ago)
Wordpress malicious attack:[octablocked]
Web App Attack
๐บ๐ธ
solcoagula
2026-05-27 20:50:38
(2 weeks ago)
CrowdSec %!s(*string=0x3c82e02b85f0) fired on nuc10; 66532799424428 events in window
Port Scan
Anonymous
2026-05-27 08:06:17
(2 weeks ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-27 05:01:00
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.17.85.26 (26.85.17.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.85.26 (26.85.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 01:00:55.765475 2026] [security2:error] [pid 26995:tid 26995] [client 34.17.85.26:47976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.truecontrarian.com"] [uri "/.git/config"] [unique_id "ahZ6h2ZzeAxNj2Zp8a742AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
NXTwoThou
2026-05-27 05:00:18
(3 weeks ago)
/.git/config
Web App Attack
๐ฑ๐ป
garmtech.com
2026-05-27 04:56:20
(3 weeks ago)
Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probi ...
show more
Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing.
show less
Web App Attack
๐ณ๐ฑ
ParaBug
2026-05-27 04:43:17
(3 weeks ago)
34.17.85.26 - - [27/May/2026:06:43:17 +0200] "GET /.git/config HTTP/1.1" 301 3110 "-" "Mozilla/5.0 ( ...
show more
34.17.85.26 - - [27/May/2026:06:43:17 +0200] "GET /.git/config HTTP/1.1" 301 3110 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
...
show less
Phishing
Brute-Force
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-05-27 04:28:03
(3 weeks ago)
Login credentials theft attempt
Hacking
๐ท๐ธ
Smel
2026-05-27 04:07:09
(3 weeks ago)
HTTP/80/443/8080 Unauthorized Probe, Hack -
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-27 03:51:44
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.17.85.26 (26.85.17.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.85.26 (26.85.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 23:51:39.482157 2026] [security2:error] [pid 982:tid 982] [client 34.17.85.26:42326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kathleenhazlett.com"] [uri "/.git/config"] [unique_id "ahZqSwR86UtxFzSqSay_LwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-26 23:10:57
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.17.85.26 (26.85.17.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.85.26 (26.85.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 19:10:52.765763 2026] [security2:error] [pid 30816:tid 30816] [client 34.17.85.26:52102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rivercityacct.com"] [uri "/.git/config"] [unique_id "ahYofEtzVLO0h6uIVl0NMgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-26 21:32:14
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.17.85.26 (26.85.17.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.85.26 (26.85.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 17:32:08.069962 2026] [security2:error] [pid 11257:tid 11275] [client 34.17.85.26:45166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nelsonyung.com"] [uri "/.git/config"] [unique_id "ahYRWCxEyXiK0p2YSouVLwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack