🇬🇧
[email protected]
2025-11-08 00:52:27
UTC ·
(1 year ago)
...
Brute-Force
SSH
🇳🇱
homeshowdomain.nl
2025-11-07 23:00:54
UTC ·
(1 year ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-06.
Hacking
Web App Attack
SSH
🇬🇧
openstrike.co.uk
2025-11-07 06:13:23
UTC ·
(1 year ago)
2 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇺🇸
octageeks.com
2025-11-07 05:09:22
UTC ·
(1 year ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇳🇱
homeshowdomain.nl
2025-11-06 23:01:07
UTC ·
(1 year ago)
Auto-ban: >3000 req/min op 2025-11-06
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-06 21:51:07
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.29.45.78 (78.45.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 16:51:04.158040 2025] [security2:error] [pid 20589:tid 2058 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.29.45.78 (78.45.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 16:51:04.158040 2025] [security2:error] [pid 20589:tid 20589] [client 34.29.45.78:36330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.hazelwerner.com"] [uri "/.git/config"] [unique_id "aQ0YSGwp_HYQyixK8YwL4wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2025-11-06 21:50:53
UTC ·
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.29.45.78 (US/United States/78.45.29.34.bc.googleusercontent.com): 1 in the last 3600 secs
Web App Attack
🇺🇸
TPI-Abuse
2025-11-06 21:28:43
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.29.45.78 (78.45.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 16:28:36.260658 2025] [security2:error] [pid 13772:tid 1377 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.29.45.78 (78.45.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 16:28:36.260658 2025] [security2:error] [pid 13772:tid 13772] [client 34.29.45.78:55842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.grandersonheatingandcooling.com"] [uri "/.git/config"] [unique_id "aQ0TBPfcSV8gahH7gNQHPwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-11-06 21:16:24
UTC ·
(1 year ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-11-06 21:11:04
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.29.45.78 (78.45.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 16:11:01.446537 2025] [security2:error] [pid 13166:tid 1316 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.29.45.78 (78.45.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 16:11:01.446537 2025] [security2:error] [pid 13166:tid 13166] [client 34.29.45.78:59708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.getmypov.com"] [uri "/.git/config"] [unique_id "aQ0O5dWllTk_7j6-ztXJ9gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-06 20:48:29
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.29.45.78 (78.45.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 15:48:24.187467 2025] [security2:error] [pid 7012:tid 7012] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.29.45.78 (78.45.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 15:48:24.187467 2025] [security2:error] [pid 7012:tid 7012] [client 34.29.45.78:35816] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.francesphilosophy.com"] [uri "/.git/config"] [unique_id "aQ0JmDbauqgsR2lI33rJ6gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
COMPLEX
2025-11-06 19:15:28
UTC ·
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (GOOGLE-CLOUD-PLATFORM)
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
Bad Web Bot
🇺🇸
RCS
2025-11-06 19:13:34
UTC ·
(1 year ago)
fail2ban apache-modsecurity
...
Bad Web Bot
Web App Attack
Anonymous
2025-11-06 19:05:08
UTC ·
(1 year ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2025-11-06 19:03:09
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.29.45.78 (78.45.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 14:03:05.793763 2025] [security2:error] [pid 24010:tid 2401 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.29.45.78 (78.45.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 14:03:05.793763 2025] [security2:error] [pid 24010:tid 24010] [client 34.29.45.78:51712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "verdadesreales.com"] [uri "/.git/config"] [unique_id "aQzw6XO8Y2EWBE_UmSzrywAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack