๐ฆ๐บ
paulshipley.com.au
2026-10-23 17:23:47
(12 minutes ago)
[Sat Oct 24 04:23:46.327704 2026] [security2:error] [pid 177419] [client 34.176.156.8:41200] [client ...
show more
[Sat Oct 24 04:23:46.327704 2026] [security2:error] [pid 177419] [client 34.176.156.8:41200] [client 34.176.156.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "iaki.com.au"] [uri "/"] [unique_id "atuYIoqizFnszknFwhd29QAAAAA"]
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 17:11:31
(24 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.176.156.8 (8.156.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.156.8 (8.156.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 13:11:27.680906 2026] [security2:error] [pid 18236:tid 18236] [client 34.176.156.8:55832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iainrealtor.com"] [uri "/.git/config"] [unique_id "atuVP3CeqynJFsFFKEYUJwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-23 13:15:09
(4 hours ago)
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.176.156.8 - - [23/Oct/2026:15:14:50 +0200] "GET /.git/config HTTP/1.1" 404 1434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-10-23 12:32:07
(5 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.astropot.tech | URI: /.git/config | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"CL","Cf-Connecting-Ip":"34.176.156.8","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4f0c33b4b5bbd9e-GRU","Accept-Encoding":"gzip, br","Accept":"*\/*","Next-Action":"x","X-Nextjs-Reque
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-23 05:30:17
(12 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
๐ฉ๐ฐ
ScamAware
2026-10-23 03:03:52
(14 hours ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 90. Unique request paths counted internally: 90. Cloudflare action: block. Cloudflare source: firewallCustom.
show less
Web App Attack
Anonymous
2026-10-23 02:30:06
(15 hours ago)
| [Dangerous/Chile] Aggressive IP 34.176.156.8 (~30 hits). Type: DoS Defender- Web server 400 error ...
show more
| [Dangerous/Chile] Aggressive IP 34.176.156.8 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
๐ณ๐ฑ
Site.eu
2026-10-22 22:19:53
(19 hours ago)
Excessive 404/403 errors
Brute-Force
๐บ๐ธ
Sonoflet
2026-10-22 13:48:14
(1 day ago)
CrowdSec detection | scenario: http-probing
Port Scan
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-22 08:57:23
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
Alt255
2026-10-22 08:18:16
(1 day ago)
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.176.156.8 - - [22/Oct/2026:10:18:05 +0200] "GET /.git/config HTTP/1.1" 404 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
ipblock.com
2026-10-22 05:28:00
(1 day ago)
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-10-22 03:56:21
(1 day ago)
[redacted] 34.176.156.8 - - [22/Oct/2026:04:56:20 +0100] "GET /.git/config HTTP/1.1" 302 1554 0/3747 ...
show more
[redacted] 34.176.156.8 - - [22/Oct/2026:04:56:20 +0100] "GET /.git/config HTTP/1.1" 302 1554 0/37472 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" [redacted] 34.176.156.8 - - [22/Oct/2026:04:56:20 +0100] "GET /.env HTTP/1.1" 302 1554 0/28475 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
WebNiraj
2026-10-22 01:43:23
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 34.176.156.8 (8.156.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:949110) triggered by 34.176.156.8 (8.156.176.34.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
show less
Brute-Force
๐ฉ๐ช
big-cloud.nl
2026-10-21 23:37:07
(1 day ago)
Try to access /.git/config
Web App Attack