🇬🇧
consul.to
2026-09-29 13:27:42
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Site.eu
2026-09-29 11:54:41
(5 days ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-29 07:52:54
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.180.88.53 (53.88.180.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.180.88.53 (53.88.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 03:52:49.274676 2026] [security2:error] [pid 20452:tid 20452] [client 34.180.88.53:55086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.allworld.csennews.com"] [uri "/.git/config"] [unique_id "artuUXw3Zk8rmEaPKMyh7gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 10:19:39
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.180.88.53 (53.88.180.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.180.88.53 (53.88.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 06:19:31.967402 2026] [security2:error] [pid 29149:tid 29149] [client 34.180.88.53:36654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ajdejano.janbloom-art.com"] [uri "/.git/config"] [unique_id "aro_M1yvGpZ_DplsaM0VYQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-28 08:40:16
(6 days ago)
Aggressive web scan
Web App Attack
2026-09-27 21:10:58
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇬🇧
consul.to
2026-09-27 18:21:12
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-27 17:56:25
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.180.88.53 (53.88.180.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.180.88.53 (53.88.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 13:56:21.539137 2026] [security2:error] [pid 27352:tid 27352] [client 34.180.88.53:36040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dolapdere.click.handankoc.net"] [uri "/.git/config"] [unique_id "arlYxaVPYWxfmPdqXAYUDwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-27 17:02:30
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇦🇺
screwlooseit.com.au
2026-09-27 09:57:54
(1 week ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/53.88.180.34.bc.googleusercontent ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/53.88.180.34.bc.googleusercontent.com
show less
Web App Attack
🇩🇪
EGP Abuse Dept
2026-09-27 09:34:10
(1 week ago)
Scanning for web/db/file exploits on www.allpa.nl.mach3shop.nl
SQL Injection
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-26 15:35:03
(1 week ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 18:35:33
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.180.88.53 (53.88.180.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.180.88.53 (53.88.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:35:25.044119 2026] [security2:error] [pid 3787:tid 3787] [client 34.180.88.53:39448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ieas.org"] [uri "/.git/config"] [unique_id "arVtbR0yknQm5PFsoPlNtAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-24 04:31:01
(1 week ago)
[web.zebs.ch] httpd-config-scan: sites=www.asiqual.com; logs=/var/log/httpd/domains/asiqual.com.log; ...
show more
[web.zebs.ch] httpd-config-scan: sites=www.asiqual.com; logs=/var/log/httpd/domains/asiqual.com.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
🇭🇺
szasa
2026-09-22 10:10:28
(1 week ago)
2026/09/22 12:10:17 [error] 1641#1641: *100181 access forbidden by rule, client: 34.180.88.53, serve ...
show more
2026/09/22 12:10:17 [error] 1641#1641: *100181 access forbidden by rule, client: 34.180.88.53, server: datamentor.hu, request: "GET /.git/config HTTP/1.1", host: "www.beszerzokozpont.hu"
2026/09/22 12:10:19 [error] 1641#1641: *100181 access forbidden by rule, client: 34.180.88.53, server: datamentor.hu, request: "GET /.env HTTP/1.1", host: "www.beszerzokozpont.hu"
2026/09/22 12:10:27 [error] 1641#1641: *100181 access forbidden by rule, client: 34.180.88.53, server: datamentor.hu, request: "GET /app/.env HTTP/1.1", host: "www.beszerzokozpont.hu"
2026/09/22 12:10:28 [error] 1641#1641: *100181 access forbidden by rule, client: 34.180.88.53, server: datamentor.hu, request: "GET /apps/.env HTTP/1.1", host: "www.beszerzokozpont.hu"
...
show less
Web App Attack
