๐ท๐ด
iulianh
2026-09-18 15:09:10
(1 day ago)
80,443
Brute-Force
SSH
๐ซ๐ท
masterguru
2026-09-18 14:39:22
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
Anonymous
2026-09-17 13:45:17
(2 days ago)
Observed scanned 13 known-sensitive endpoint(s), e.g.: /, /bulk/.env, /core/phpinfo.php, /dev/.env, ...
show more
Observed scanned 13 known-sensitive endpoint(s), e.g.: /, /bulk/.env, /core/phpinfo.php, /dev/.env, /express/.env, /hosting/phpinfo.php
show less
Bad Web Bot
Web App Attack
๐ฎ๐ณ
evicky2002
2026-09-17 06:00:05
(2 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ต๐ฑ
srebrakowski.com
2026-09-17 03:32:47
(2 days ago)
crowdsec/crowdsecurity/appsec-vpatch
Brute-Force
๐ณ๐ฑ
Alt255
2026-09-17 02:23:16
(2 days ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.18.229.105 - - [17/Sep/2026:04:23:02 +0200] "GET /.git/config HTTP/1.1" 301 532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ง๐ช
voormedia
2026-09-17 02:23:08
(2 days ago)
Accessed trap at '/.git/config'
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-17 02:17:13
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-16 16:07:41
(3 days ago)
Excessive 404/403 errors
Brute-Force
๐ฉ๐ช
marten_o
2026-09-16 15:42:19
(3 days ago)
34.18.229.105 - - [16/Sep/2026:17:42:18 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 500 576 "-" "Mozilla/ ...
show more
34.18.229.105 - - [16/Sep/2026:17:42:18 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 500 576 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 381 774
...
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-16 15:32:25
(3 days ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.18.229.105 - - \[16/Sep/2026:17:32:11 +0200\] "GET /.git/config HTTP/1.1" 301 580 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 14:13:55
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.18.229.105 (105.229.18.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.229.105 (105.229.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 10:13:45.895789 2026] [security2:error] [pid 5926:tid 5926] [client 34.18.229.105:50522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ielts-english.info"] [uri "/.git/config"] [unique_id "aqqkGXHnxzwfltEwnCqlIAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 13:53:08
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.18.229.105 (105.229.18.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.229.105 (105.229.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:53:04.230853 2026] [security2:error] [pid 26624:tid 26624] [client 34.18.229.105:35886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iee-usa.com"] [uri "/.git/config"] [unique_id "aqqfQD1LkbEsqa7kwqfPqgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-16 12:04:12
(3 days ago)
Bot / seems abusive / Apache connections: 33
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 10:51:44
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.18.229.105 (105.229.18.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.229.105 (105.229.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:51:40.104974 2026] [security2:error] [pid 1791:tid 1791] [client 34.18.229.105:51456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibermar.info"] [uri "/.git/config"] [unique_id "aqp0vGwb5Ns6Dv0j2LkdxwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack