🇬🇧
[email protected]
2025-11-18 00:54:38
UTC ·
(11 months ago)
...
Brute-Force
SSH
🇳🇱
homeshowdomain.nl
2025-11-17 22:59:36
UTC ·
(11 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-16.
Hacking
Web App Attack
SSH
🇬🇧
openstrike.co.uk
2025-11-17 06:13:13
UTC ·
(11 months ago)
3 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇺🇸
octageeks.com
2025-11-17 05:06:40
UTC ·
(11 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇳🇱
jjnxpct
2025-11-17 04:46:31
UTC ·
(11 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/config]
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2025-11-16 23:01:20
UTC ·
(11 months ago)
Auto-ban: >3000 req/min op 2025-11-16
Hacking
Web App Attack
SSH
🇨🇿
ddw
2025-11-16 19:48:04
UTC ·
(11 months ago)
ModSecurity detection - Rules: 930130(Restricted File Access Attempt)
Web App Attack
🇦🇺
Asimar
2025-11-16 19:43:26
UTC ·
(11 months ago)
(mod_security) mod_security triggered on hostname [redacted] 34.186.9.4 (US/United States/-): (CF_ENABLE)
SQL Injection
🇺🇸
TPI-Abuse
2025-11-16 19:38:09
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 34.186.9.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 14:38:01.305063 2025] [security2:error] [pid 18867:tid 18867] [client 34.186.9.4:43798] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.9.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 14:38:01.305063 2025] [security2:error] [pid 18867:tid 18867] [client 34.186.9.4:43798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fiercewolf.com"] [uri "/.git/config"] [unique_id "aRooGb4n6t7jUmDD3vJCKgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-16 19:21:51
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 34.186.9.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 14:21:46.014146 2025] [security2:error] [pid 4824:tid 4824] [client 34.186.9.4:36406] ModSecuri ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.9.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 14:21:46.014146 2025] [security2:error] [pid 4824:tid 4824] [client 34.186.9.4:36406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fha-roster.com"] [uri "/.git/config"] [unique_id "aRokSpf6IZBmOvhL9HI5bQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Kreapptivo
2025-11-16 19:06:18
UTC ·
(11 months ago)
[16/Nov/2025:20:06:15 +0100] Web-Request: "GET /.git/config", User-Agent: "-"
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-16 18:52:34
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 34.186.9.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 13:52:26.438308 2025] [security2:error] [pid 3266:tid 3266] [client 34.186.9.4:52520] ModSecuri ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.9.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 13:52:26.438308 2025] [security2:error] [pid 3266:tid 3266] [client 34.186.9.4:52520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ferrarapanfitness.com"] [uri "/.git/config"] [unique_id "aRodavwGPPASuO0yEomXTwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2025-11-16 18:14:16
UTC ·
(11 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-11-16 17:52:37
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 34.186.9.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 12:52:30.452355 2025] [security2:error] [pid 4488:tid 4488] [client 34.186.9.4:57450] ModSecuri ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.9.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 12:52:30.452355 2025] [security2:error] [pid 4488:tid 4488] [client 34.186.9.4:57450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fdoc.freerein.info"] [uri "/.git/config"] [unique_id "aRoPXjy_9ndXd5tLjz9_FgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-16 17:29:12
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 34.186.9.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 12:29:05.906831 2025] [security2:error] [pid 31021:tid 31021] [client 34.186.9.4:56786] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.9.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 12:29:05.906831 2025] [security2:error] [pid 31021:tid 31021] [client 34.186.9.4:56786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.faw.us"] [uri "/.git/config"] [unique_id "aRoJ4feGDOstV4zOTkI0qwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack