Anonymous
2026-08-29 01:55:02
UTC ·
(2 months ago)
suspicious request in access.log
Web App Attack
Anonymous
2026-08-28 23:17:11
UTC ·
(2 months ago)
Web application attack detected.
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-28 22:00:29
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27.
Web App Attack
SSH
Hacking
🇺🇸
kosada.com
2026-08-28 16:47:54
UTC ·
(2 months ago)
Web vulnerability probing: /app/.git/config
Web App Attack
🇯🇵
beon
2026-08-28 16:34:31
UTC ·
(2 months ago)
[DateTime=>2026-08-28T16:34:31Z to 2026-08-28T16:34:32Z (UTC)] , [HoneyPot_Hits=>24 times] , [HoneyPots=>/var/www/.git/config, /src/.git/config, /htdocs/.git/config, /html/.git/config, /public/.git/config, /.git/config and others] , [total_Hits=>24 t ...
show more
[DateTime=>2026-08-28T16:34:31Z to 2026-08-28T16:34:32Z (UTC)] , [HoneyPot_Hits=>24 times] , [HoneyPots=>/var/www/.git/config, /src/.git/config, /htdocs/.git/config, /html/.git/config, /public/.git/config, /.git/config and others] , [total_Hits=>24 times] , [hit_per_second=>24] , [Keyword=>WordPress]
show less
Bad Web Bot
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-28 13:12:59
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.20.213.0 (0.213.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:12:54.918336 2026] [security2:error] [pid 20168:tid 2017 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.20.213.0 (0.213.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:12:54.918336 2026] [security2:error] [pid 20168:tid 20176] [client 34.20.213.0:34976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emjayentertainmentdj.com"] [uri "/var/www/.git/config"] [unique_id "apGJVpKAkQgFwxbeIR6MFAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-28 11:36:03
UTC ·
(2 months ago)
Trying to access config files
Web App Attack
🇬🇧
consul.to
2026-08-28 10:43:59
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
dynamix
2026-08-27 13:06:50
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇫🇷
masterguru
2026-08-27 11:52:33
UTC ·
(2 months ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇺🇸
mnsf
2026-08-27 11:05:50
UTC ·
(2 months ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 10:50:35
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.20.213.0 (0.213.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 06:50:30.651550 2026] [security2:error] [pid 3247:tid 3247] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.20.213.0 (0.213.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 06:50:30.651550 2026] [security2:error] [pid 3247:tid 3247] [client 34.20.213.0:60338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pfs-nj.com"] [uri "/www/.git/config"] [unique_id "apAWdochB2XnVvoYh8z-LAAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Uwe Sarpe
2026-08-27 10:37:19
UTC ·
(2 months ago)
[Thu Aug 27 12:37:17.536373 2026] [access_compat:error] [pid 553188:tid 553188] [client 34.20.213.0:48540] AH01797: client denied by server configuration: /var/www/public
[Thu Aug 27 12:37:17.538370 2026] [access_compat:error] [pid 553184:tid 553184] ...
show more
[Thu Aug 27 12:37:17.536373 2026] [access_compat:error] [pid 553188:tid 553188] [client 34.20.213.0:48540] AH01797: client denied by server configuration: /var/www/public
[Thu Aug 27 12:37:17.538370 2026] [access_compat:error] [pid 553184:tid 553184] [client 34.20.213.0:48572] AH01797: client denied by server configuration: /var/www/.git
[Thu Aug 27 12:37:17.546593 2026] [access_compat:error] [pid 553185:tid 553185] [client 34.20.213.0:48524] AH01797: client denied by server configuration: /var/www/site
[Thu Aug 27 12:37:17.547780 2026] [access_compat:error] [pid 553189:tid 553189] [client 34.20.213.0:48530] AH01797: client denied by server configuration: /var/www/app
[Thu Aug 27 12:37:17.555776 2026] [access_compat:error] [pid 553190:tid 553190] [client 34.20.213.0:48574] AH01797: client denied by server configuration: /var/www/wordpress
...
show less
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-08-27 09:56:17
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
ISPLtd
2026-08-27 09:28:29
UTC ·
(2 months ago)
Aug 27 06:28:28 34.20.213.0 TCP SPT=60792 DPT=80 SYN
Aug 27 06:28:28 34.20.213.0 TCP SPT=60798 DPT=80 SYN
Aug 27 06:28:28 34.20.213.0 TCP SPT=60782 DPT=80 SYN
Aug
...
DDoS Attack