Anonymous
2026-09-16 06:35:19
(1 day ago)
Scanner hitting /.git/config on nats.osef.cloud (GOOGL-2) โ aaguard
Brute-Force
Port Scan
Anonymous
2026-09-16 02:52:30
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-09-16 02:36:34
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 02:00:43
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.176.115.7 (7.115.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.115.7 (7.115.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:00:35.219829 2026] [security2:error] [pid 15634:tid 15634] [client 34.176.115.7:49696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "talkingmess.com"] [uri "/.git/config"] [unique_id "aqn4QyLuc8g0k5h09YmdlgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 23:01:16
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.176.115.7 (7.115.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.115.7 (7.115.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:01:13.492761 2026] [security2:error] [pid 27880:tid 27880] [client 34.176.115.7:57560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "talesofhartwellhouse.com"] [uri "/.git/config"] [unique_id "aqnOOSHzx8TEaGq4eDT2NgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
kosada.com
2026-09-15 20:32:18
(1 day ago)
Repeated requests for suspicious nonexistent URLs, for example: /.env.staging (HTTP/1.1 port 443, us ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /.env.staging (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36")
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-15 13:52:20
(1 day ago)
Excessive 404/403 errors
Brute-Force
๐ฉ๐ช
itsvic.dev
2026-09-15 13:08:23
(1 day ago)
34.176.115.7 - - [15/Sep/2026:13:08:13 +0000] "updates.android.itsvic.dev" "GET /api/.env HTTP/1.1" ...
show more
34.176.115.7 - - [15/Sep/2026:13:08:13 +0000] "updates.android.itsvic.dev" "GET /api/.env HTTP/1.1" 404 135 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.115.7 - - [15/Sep/2026:13:08:22 +0000] "updates.android.itsvic.dev" "GET /api/v1/.env HTTP/1.1" 404 135 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.115.7 - - [15/Sep/2026:13:08:22 +0000] "updates.android.itsvic.dev" "GET /api/v2/.env HTTP/1.1" 404 135 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-09-15 07:08:35
(1 day ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-15 05:56:22
(2 days ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.176.115.7 - - [15/Sep/2026:07:56:21 +0200] "GET /.git/config HTTP/1.1" 301 578 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
pltcldvlpr
2026-09-15 03:58:47
(2 days ago)
CMS/framework probe: 34.176.115.7 - - [15/Sep/2026:05:58:47 +0200] "GET /.git/config HTTP/1.1" 444 0 ...
show more
CMS/framework probe: 34.176.115.7 - - [15/Sep/2026:05:58:47 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" asn=396982 org="Google LLC" country=CL
...
show less
Web App Attack