๐ฟ๐ฆ
conure.sh
2026-10-17 12:05:35
(2 days ago)
csagent: score 19.9: secrets grab x2; 1 domain(s) in 2s
Web App Attack
๐ฎ๐ฉ
Burayot
2026-10-16 21:59:11
(2 days ago)
LF_APACHE_403: 34.185.226.7 (DE/Germany/7.226.185.34.bc.googleusercontent.com), more than 10 Apache ...
show more
LF_APACHE_403: 34.185.226.7 (DE/Germany/7.226.185.34.bc.googleusercontent.com), more than 10 Apache 403 hits in the last 3600 secs
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 21:15:46
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.185.226.7 (7.226.185.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.226.7 (7.226.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 17:15:40.515010 2026] [security2:error] [pid 4304:tid 4304] [client 34.185.226.7:35050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kooroshvaziri.com"] [uri "/.git/config"] [unique_id "atKT_CkO68Nu2lJpf2RxdQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-10-16 21:00:40
(2 days ago)
Try to access /.git/config
Web App Attack
๐ณ๐ฑ
ipoac.nl
2026-10-16 20:54:34
(2 days ago)
-:443 34.185.226.7 - - [16/Oct/2026:22:54:33 +0200] - "GET /.git/config HTTP/1.1" 404 1964 "-" "Mozi ...
show more
-:443 34.185.226.7 - - [16/Oct/2026:22:54:33 +0200] - "GET /.git/config HTTP/1.1" 404 1964 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-16 20:11:08
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.185.226.7 (7.226.185.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.226.7 (7.226.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:11:03.770224 2026] [security2:error] [pid 21981:tid 21981] [client 34.185.226.7:40724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koolcoastalnights.com"] [uri "/.git/config"] [unique_id "atKE1_RZWySroKWiMLUlOAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-10-16 19:54:29
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
Anonymous
2026-10-16 18:48:29
(2 days ago)
GET /.git/config HTTP/1.1
...
Web App Attack
๐บ๐ธ
francelink.fr
2026-10-16 18:14:24
(2 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-16T18:13:16.000Z.
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-16 16:42:36
(2 days ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
ecodehost.com
2026-10-16 15:33:06
(2 days ago)
Domain : kontektesisat.com
Rule : env
2026-10-16 15:31:22 10.100.1.20 GET /server-info.php - 443 - 3 ...
show more
Domain : kontektesisat.com
Rule : env
2026-10-16 15:31:22 10.100.1.20 GET /server-info.php - 443 - 34.185.226.7 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - kontektesisat.com 404 0 2 377 351 56 - -
show less
Hacking
SQL Injection
๐ซ๐ท
mail.avx.gr
2026-10-16 15:25:16
(2 days ago)
(nginxENVSCAN) nginx environment-file scanner detected from 34.185.226.7 (DE/Germany/Hesse/Frankfurt ...
show more
(nginxENVSCAN) nginx environment-file scanner detected from 34.185.226.7 (DE/Germany/Hesse/Frankfurt am Main/7.226.185.34.bc.googleusercontent.com)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-16 13:48:16
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.185.226.7 (7.226.185.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.226.7 (7.226.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:48:09.587297 2026] [security2:error] [pid 12504:tid 12504] [client 34.185.226.7:43258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konstantiasofokleous.com"] [uri "/.git/config"] [unique_id "atIrGc5V75Abt9LTp2vzFQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-16 13:41:41
(2 days ago)
7.736 requests with url.path *.env
Brute-Force
Bad Web Bot
๐ซ๐ท
j-tap
2026-10-16 12:37:49
(3 days ago)
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack